{"report_id":"bffadbb9-fdb2-4e50-acc8-89eeec3adfc8","version":0,"status":"done","tags":[],"date":"2026-08-10T14:33:49Z","url":{"schema":"http","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"title":"Кардинг Форум / Carding Forum","dom":{"size":19087,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0d1fe56569da9c9b2d37448e23a29052","sha1":"63caff1371f77f36940fe46d81aae4fd3859c795","sha256":"02067484e54659428f3fc867f53b8abfefceaee35668a0c0ea0b7fea4a9f27e7","sha512":"2852071e43d05ead3cde6068ddb78b43bef91036579c0ef9e99cc88aff85f1d9ba4c15deb545c325c603ccce6a3320230317283b35bfbf2e5c97e49e93f677f2","ssdeep":"384:21Uf+/d6s7WhAJhofEdtvg+RbRruraRMcbtFNHxFGKzQTVCQ6nmdY3vCdc5+8:4p7WhAJhofkMcbtFNHxFGKcTVCQ6nmdc","tlshash":"d982c712dd462c06200320e8f661da95b77fd04afe1baeb0b6fe16b4cf886dc55257c8","dom_hash":"domhash86edb8d0a65cae273ab6eea0aa525758","first_seen":"2026-08-10T14:33:50.878066Z","last_seen":"2026-08-10T14:39:15.540411Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":0,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T14:33:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"2crd.su","ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-08-06","domain_rank":0,"first_seen":"2026-05-16T20:55:37.774865Z","last_seen":"2026-08-05T19:56:19.976205Z","alert_count":20,"request_count":20,"received_data":246135,"sent_data":11135,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YUI","description":"YUI is a JavaScript and CSS library with more than 30 unique components including low-level DOM utilities and high-level user-interface widgets.","website":"https://clarle.github.io/yui3","common_platform_enumeration":"cpe:2.3:a:yahoo:yui:*:*:*:*:*:*:*:*","icon":"YUI.png","categories":["JavaScript libraries"]},{"name":"vBulletin:3.8.7","description":"vBulletin is tool that is used to create and manage online forums or discussion boards. It is written in PHP and uses a MySQL database server.","website":"https://www.vbulletin.com","common_platform_enumeration":"cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*","icon":"vBulletin.png","categories":["Message boards"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2crd.su/clientscript/crdclub.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c69377f0310f79d83a69544c88643d","sha1":"a774193efc87dd39c3b5d21b42be5431dd741e02","sha256":"511015a1a37007e02d4cb5bbc6d3f6cdedb45f9cb16b8c23d3555d6269ab603b","sha512":"e49407c639755bf3663473ce92b1407370258ee19978c37153677f9760b1ce4c089add9eeb2f449a00d3ec5e76638ab6bdfa6587318ab57beadcc9537458ead2","ssdeep":"","tlshash":"3c31d919f1e211251573b5359b6f9a09b4361047586ccd21fc0e92c49fa662cc6bbfa4","size":1517,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.547154Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f16dcd51fd1d51fac21a9724911184c4","sha1":"5549ff428576843dcbb70b9986e77dfbec09853a","sha256":"d40743d2f62e70a29644f823731551ac1f13903f07f8e0756aa664bb684f276c","sha512":"f754d5b364fd0697ad5f464555ea65ad786aa2e50a514eb0ffed96ef9eb68e1a0285f0f1feff43bab03aff3c8068acc76378c794a798128377a28bf149e38b3c","ssdeep":"768:gO7yLMbTHtxO03JQdPB4OdXkb3pOLVU2mTCTCraPKLIrC0qZbpa:jWLMbTHtM03JaZdXkb3pOLVNlPFrCppa","tlshash":"fbf2f8d937d2787603d6317a006fa605a23ba8d3998851d8e9e2e8c16d7478dc437fbc","size":36628,"data":"","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-10T14:39:15.555069Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"694417e14a6b1c131900afe97ec31bd0","sha1":"4dc2905e85095da92983a361c6af5bd0312bb917","sha256":"a2d14091937883c8a99cb3dad056a579cc74423310872c2fc33d268f9a1ea20f","sha512":"00aa9ce676ec7dde220b28fa18af213e36b5d2c23f9195533bdd0ace52c9c2d301a5f1cc20d24b8c063757fa7847d8cebb306ae668039bf982e8f75fa67ed80f","ssdeep":"","tlshash":"98c012160a411c05407075983aee880b47d1cf345d00e65a262ec096241e897a29561d","size":177,"data":"","first_seen":"2026-08-10T14:33:50.893567Z","last_seen":"2026-08-10T14:39:15.565226Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0205a1c47bc656a0408e24f32b772451","sha1":"f9951c1ec86ffe3240d1331cc2fa77adda04b7fa","sha256":"6e89ceac1e44b25035e99546e53b2ab615feb2dee6d3a34420606e6cf803dbf9","sha512":"09c171a17cace1b2ddc4e219a11d884a9b2509ceb60870d83bfdcee8c6775f365ecc356adfa4684457fe407a980ba51fec4c01eb046387696f1bc354811dc2f3","ssdeep":"","tlshash":"f411382cb5f120240177b1b42b1f59081d76309fa50b8e407d8daefe4f51929d3a7f28","size":1100,"data":"","first_seen":"2026-08-05T19:56:21.040339Z","last_seen":"2026-08-10T14:39:15.566711Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"33c7b5f99613b9aa972739e1553e7e72","sha1":"f7f9c6202828001423ccfe19ab14f137e2c6842d","sha256":"a59b7883cc204d3fd5a5b2bf4531ff42194a4edcb1d4b911be735efb119745be","sha512":"307bc6bee7429d54302cb228e1a93b8e2a450c699456e11b9b78a4c23f9c37232b381159b9aecfe24a18f7f01d55d37b03cfe3b947883de3731a1a5ff27373f1","ssdeep":"","tlshash":"47800411145301531177c01d3347104575c44d140001c311451c510c75c701d5004001","size":32,"data":"","first_seen":"2026-08-05T19:56:21.042982Z","last_seen":"2026-08-10T14:39:15.567799Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-10T21:49:59.611149Z","times_seen":72054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/jquery.arcticmodal.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3e4acc92cc9cb2fabb484f33eb98c6","sha1":"856feeb385a4e96427fb279af893b25706c18f9d","sha256":"be2e99b97fa562d090e1db2f9efa719f30981caa8e4b9c65c6632d80dc838562","sha512":"2f154192b78ace3eeec1ee667bd6c3d68b9f5ec5a7bcfb4df5779fee8cb11059f6d10f54022dcf75847742ce50a8a627bf31ac42f499a07d18d8a89f5378ac7a","ssdeep":"96:IrlBEiQHg5rr15z8oK4KWaQJE+TfgXwGQJ/NtToYyqhKj9EtsE0JDeL2:8BEiQHMrr15AoK4Ko6wJNtTjyNj9EtsN","tlshash":"fcc1631c7e6f35db90fe3528a02b4a057231b5eaf7164c88f056dd188e69e131871eed","size":6122,"data":"","first_seen":"2023-03-12T06:08:36Z","last_seen":"2026-08-10T14:39:15.569098Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.cookie.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","size":732,"data":"","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-08-10T14:39:15.563049Z","times_seen":1904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/onion.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb65c6a2b435fde06a5fd63744cb3c6d","sha1":"50b0dc68230396469ff5b15d04488f065b7b6bb5","sha256":"131b5f0f748275cdac97afc45115e32c274091233044bc5633411277c51e58a9","sha512":"eeb20d51d1b8cd084c08a4df20a5a3a145a70ae1c6497c615bb08f67957f8f4a8a9adb7d0b9ea31c047723976bed5f98ad345ca107833bdaa6243232134ab7d2","ssdeep":"","tlshash":"38d0c9db198067513be21203ce53a204357321ef2901a5528d925500b568faf966aadf","size":204,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.548735Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_md5.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5197e6df4b7a32c54834cdc210c866cb","sha1":"fa94d8ae90bd9a953934c4c4020718530aa8131c","sha256":"6e4ed9f4271f22c3bb4405155731f16c131e71d4c752060017496c0bbd2d5c85","sha512":"905a3b4e7ff32761ded7bf52b3bd6f9e0ca5934a014d22fbb24d3a86b88526ef6a873731da6d2dcb89ec8a13ba2b807ad365e2624c9caf10cdb3fc43392c55f4","ssdeep":"96:Aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMlzEA54aTfCNYKfLQX0rbaGXR7aw:FOq0xvNJUNOi4aTqSKzC0rvuMr","tlshash":"abb1fd40b381c175d7be8af07c8a1f4ef17e9aa808060408b4b29fdc9ded47944a9f1a","size":5464,"data":"","first_seen":"2023-03-07T12:10:30Z","last_seen":"2026-08-10T14:39:15.56439Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/connection/connection-min.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed935da9668b7350505daa30027a6f44","sha1":"10ebcea9a5b9a89ad271c462fdafb5d012b9af64","sha256":"a0297b3ea37cda46af5a08ed89b1563987e6f6a233286e1a373668776134841c","sha512":"b53009564c3e69ca1803a4f185e647226dbcaecd2bd58a7f0ff00645e475b13f163c3bd243000356843f8dab471c6eb842253cd2f74f9ed4e86155f3b3d853b5","ssdeep":"192:gzADNoHX4dmPXOYeylk25sOzIGDclyBeBUef913P6KnEyCUt:gzADNoHX4d5ylk25sOzlcUjefP3P6Zy5","tlshash":"0e32f936315124f34efe9055857f9f85ba3458972488b49a38e8eccf856cac1c06bfb8","size":11604,"data":"","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-10T14:39:15.559556Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_global.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fca43b6c0e4fcbfcaae98776bf3579e","sha1":"20b8b57b543e0e041b19d5457eca3be99af3da89","sha256":"ba9eadb7cbded72cf37c9249b43f9ddf9ac25ac1e981b3a1a572eb83876ae9aa","sha512":"20d8a4b61de7fd954295946f0051bd7cdbd9032309da401efcaec606dbe553a67f6aa6aaccaa84a8b502bef038374a25826230b2722f7e4d35b0899e44812b1c","ssdeep":"768:BzDP6MPks49ZGI8CNk2Zqs1nlwD6mlRO5/pbJxpivDloLX7:YEks49sI8CNLZqnD6mlRO5x1xpivDlsr","tlshash":"8ec209113a68697743fe91a51cef4509b1792d314a19a0a4e04ce6f538b0f8783ebfac","size":26028,"data":"","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.56373Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/kr_scripts/rbs_scripts/rbs_banner_sender.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"258705caa9bf4e4dae18917b7ad9d2e3","sha1":"4c9a3e39bf116c19d48a63726d327afe1ad20713","sha256":"fa329fcf2b782334e5ca46f3c6ece1302dc8b38fc7f1a138b7c297181b86b457","sha512":"8511c3af8384a0caac840bc180caeab5959fa26dbd6f3441e1d096971190365bfede0004d069393cd17ecd3ae1d4acb4aace5940fa25f699fb3d218c9e40fe01","ssdeep":"","tlshash":"0d21302a3ac048b73fe9646d84fe889674390d13135482e88114540b9c7c7dd44febce","size":1206,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.556119Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery_em.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b1f43de753f1692cc9cb306acd05349","sha1":"8cde8afe7b0c21e2c0abb001f3bf6016a4b27308","sha256":"1cbeb4f61de9a2d2765edb71cbc04377676ea34d94ca5ac3e2345ff40b1497eb","sha512":"e36d924fb1932aa902366fce4328b686c02a2098095963c147b66b42ca7b85dd0e30419d44a643218ab87b35d063730c7548925f97d69a5177467b939d4b79d6","ssdeep":"","tlshash":"c45185cdb3013150ca7b62b135afef0ea7379450adab5507b62d90122db9949115ff3c","size":2653,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.552254Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_menu.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"87b47acaf36c7a6d8829ef6977d7548b","sha1":"0cbc61f9c7a86e05d665f5957a72aa82c27def61","sha256":"0724508185a8bf666d977bbfe9329210d581563a4936d14e11813d62155de03b","sha512":"0fa208c7339affe2f8b838d24e628388e226daa4a857c554ed8b04d1883b77ca3a366c4b0803c76a8efd258a22bfe24f58c5d91d0a6dd9d23cb3c5928b26fcb7","ssdeep":"192:BzD2kGrKypuEZcppUDiY72Ka0dhDzifARVTi6y6Y6Oe616Y6e62O9QwDrskSN2ZM:BzD2k5ypuEZcpaDiY72Ka0dhDzifARVq","tlshash":"db1263862e5825324395d15c72eb8336a231905e9d4bda0d78fcbde50df274410efbba","size":9442,"data":"","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.560206Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_menu.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.443Z","timestamp":1786372401443,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_menu.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2664\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"24e1-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9441,"size_decoded":2968,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (8730)","md5":"87b47acaf36c7a6d8829ef6977d7548b","sha1":"0cbc61f9c7a86e05d665f5957a72aa82c27def61","sha256":"0724508185a8bf666d977bbfe9329210d581563a4936d14e11813d62155de03b","sha512":"0fa208c7339affe2f8b838d24e628388e226daa4a857c554ed8b04d1883b77ca3a366c4b0803c76a8efd258a22bfe24f58c5d91d0a6dd9d23cb3c5928b26fcb7","ssdeep":"192:BzD2kGrKypuEZcppUDiY72Ka0dhDzifARVTi6y6Y6Oe616Y6e62O9QwDrskSN2ZM:BzD2k5ypuEZcpaDiY72Ka0dhDzifARVq","tlshash":"db1263862e5825324395d15c72eb8336a231905e9d4bda0d78fcbde50df274410efbba","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.560206Z","times_seen":32,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":516,"dns":0,"connect":27,"send":0,"wait":179,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/images/BluEVO/gradients/gradient_tcat.gif","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:22.342Z","timestamp":1786372402342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /images/BluEVO/gradients/gradient_tcat.gif HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1063\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Thu, 26 Aug 2010 17:10:38 GMT\r\nETag: \"427-48ebd13bd9f80\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1063,"size_decoded":1308,"mime_type":"image/gif","magic":"GIF image data, version 89a, 27 x 38","md5":"f28bd436e03422caf7b73928f08b17d5","sha1":"be73b97f20029fc7916a04e00dac4096c461fc0a","sha256":"038357e458a7186524428ef2fa6259ffbacc0cba958740e0b9159af09be69872","sha512":"0026608d57b06e23fbea5d67b811b599f8daf8d0a924acc8a9381472c8966b88564a58030fa602a028ab532c51d715deefb2ba33c219fbd5b3a7b4793c6a49a2","ssdeep":"","tlshash":"eb112414163dd888cfbda8f9c88c0598259ce6492073fcc71c4590ba52295fdccbeb56","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.549983Z","times_seen":31,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":27,"send":0,"wait":177,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/favicon.png","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:22.688Z","timestamp":1786372402688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 8303\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Thu, 07 Feb 2019 11:59:46 GMT\r\nETag: \"206f-5814c941d5080\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8303,"size_decoded":8549,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"217f45b786ebf102cd45a604bd83f49e","sha1":"c4777122cddb96d929ed84b192b30650345b58e9","sha256":"8e64ed84994274b2631fadc9582c52a625fcb310d8e52ef0e35ff1b054e41cef","sha512":"779d892ce46072998bc2be1e5f8d7dacc529db95f496d852378bf88c116a50ce595c85247a6eafae561ce0743d08731b8422c582bcdb457c9cda2ec5ebac98d5","ssdeep":"192:6S0tKg9E05TLjznocaoSYrrIw5oxZ7IwqL:uXE053jzoToSAN6xrqL","tlshash":"8b02d01fd110e2de9de832505ec80b829a3923fef9e3169c54c02ded6c58c0626e34e6","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.551107Z","times_seen":31,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":174,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T14:33:20.776Z","timestamp":1786372400776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/html; charset=windows-1251\r\nContent-Length: 4968\r\nConnection: close\r\nCache-Control: private\r\nPragma: private\r\nX-UA-Compatible: IE=7\r\nSet-Cookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; path=/; HttpOnly\ncclastvisit=1786372401; expires=Tue, 10-Aug-2027 14:33:21 GMT; path=/; secure\ncclastactivity=0; expires=Tue, 10-Aug-2027 14:33:21 GMT; path=/; secure\r\nUpgrade: h2\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YUI","description":"YUI is a JavaScript and CSS library with more than 30 unique components including low-level DOM utilities and high-level user-interface widgets.","website":"https://clarle.github.io/yui3","common_platform_enumeration":"cpe:2.3:a:yahoo:yui:*:*:*:*:*:*:*:*","icon":"YUI.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"vBulletin:3.8.7","description":"vBulletin is tool that is used to create and manage online forums or discussion boards. It is written in PHP and uses a MySQL database server.","website":"https://www.vbulletin.com","common_platform_enumeration":"cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*","icon":"vBulletin.png","categories":["Message boards"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":19915,"size_decoded":5479,"mime_type":"text/html; charset=windows-1251","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"40403797433d7b75160e62a4c8a92484","sha1":"fc9b40cd66ac091df837baffb3edb7d44b065404","sha256":"37128fcf992e07b7392dece95c0bdb31ce60d4edbce927d9c9a3344bf6cae034","sha512":"70253e1c790f3c0e1096598459628c321abe319efdbe9678f5f204bf147d71e6db44a14f9e12601ef9144398e8305bcebca3f52169581e5080fd70f1141b2598","ssdeep":"384:Sb2JNVF7BhHJhTU1MoiCjtTsyxbZHCw4itkDu:S4F7BhHJhT8jtTsyx1HC7iMu","tlshash":"8e92d85aec09a46a162321f4f371c651ff7e9086ee038eb075fc12b2df5699c1d296c8","first_seen":"2026-08-10T14:33:50.882233Z","last_seen":"2026-08-10T14:39:15.561667Z","times_seen":3,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":35,"connect":27,"send":0,"wait":335,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/themes/simple.css","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.432Z","timestamp":1786372401432,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /arcticmodal/themes/simple.css HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/css\r\nContent-Length: 291\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 30 Mar 2013 08:58:50 GMT\r\nETag: \"1a5-4d92098a56680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":421,"size_decoded":586,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d57e6881fc7ea8b30df11b0da881a340","sha1":"5712fcdc18b9689054dc0506192bbef838ae8f55","sha256":"8cf3b2b1df1ac474a89f169d8244e1c2bdd705a807647fc39356d9f35cbd84ab","sha512":"a2d73d74e08f1a3bfb57ae021ab9ab36b181c17497ef7aaa6febbc63aae61013f88bf426383f83c80d6423831469101d847d130a75b55d270b807d8cc40776dc","ssdeep":"","tlshash":"95e05c15cfac031d315b717ab2315fd71f140119902a472e30b4e121a1de46859607e0","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.545591Z","times_seen":41,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":175,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/onion.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.436Z","timestamp":1786372401436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/onion.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 141\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 10 Aug 2019 23:01:56 GMT\r\nETag: \"cc-58fcb47020100-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204,"size_decoded":442,"mime_type":"text/javascript","magic":"ASCII text","md5":"eb65c6a2b435fde06a5fd63744cb3c6d","sha1":"50b0dc68230396469ff5b15d04488f065b7b6bb5","sha256":"131b5f0f748275cdac97afc45115e32c274091233044bc5633411277c51e58a9","sha512":"eeb20d51d1b8cd084c08a4df20a5a3a145a70ae1c6497c615bb08f67957f8f4a8a9adb7d0b9ea31c047723976bed5f98ad345ca107833bdaa6243232134ab7d2","ssdeep":"","tlshash":"38d0c9db198067513be21203ce53a204357321ef2901a5528d925500b568faf966aadf","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.548735Z","times_seen":31,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":259,"dns":0,"connect":27,"send":0,"wait":176,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/kr_scripts/rbs_scripts/rbs_banner_sender.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.445Z","timestamp":1786372401445,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/kr_scripts/rbs_scripts/rbs_banner_sender.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 547\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 11 Mar 2013 14:44:22 GMT\r\nETag: \"4b6-4d7a735627d80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":849,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1174), with CRLF line terminators","md5":"258705caa9bf4e4dae18917b7ad9d2e3","sha1":"4c9a3e39bf116c19d48a63726d327afe1ad20713","sha256":"fa329fcf2b782334e5ca46f3c6ece1302dc8b38fc7f1a138b7c297181b86b457","sha512":"8511c3af8384a0caac840bc180caeab5959fa26dbd6f3441e1d096971190365bfede0004d069393cd17ecd3ae1d4acb4aace5940fa25f699fb3d218c9e40fe01","ssdeep":"","tlshash":"0d21302a3ac048b73fe9646d84fe889674390d13135482e88114540b9c7c7dd44febce","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.556119Z","times_seen":35,"resource_available":true,"data":null}},"time_used":878,"timings":{"blocked":528,"dns":0,"connect":108,"send":0,"wait":175,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_md5.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.446Z","timestamp":1786372401446,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_md5.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2009\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"1558-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5464,"size_decoded":2313,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (5464), with no line terminators","md5":"5197e6df4b7a32c54834cdc210c866cb","sha1":"fa94d8ae90bd9a953934c4c4020718530aa8131c","sha256":"6e4ed9f4271f22c3bb4405155731f16c131e71d4c752060017496c0bbd2d5c85","sha512":"905a3b4e7ff32761ded7bf52b3bd6f9e0ca5934a014d22fbb24d3a86b88526ef6a873731da6d2dcb89ec8a13ba2b807ad365e2624c9caf10cdb3fc43392c55f4","ssdeep":"96:Aa28J0Hju1W1nK21b1DxMOUe1kTQBstOJMFGMlzEA54aTfCNYKfLQX0rbaGXR7aw:FOq0xvNJUNOi4aTqSKzC0rvuMr","tlshash":"abb1fd40b381c175d7be8af07c8a1f4ef17e9aa808060408b4b29fdc9ded47944a9f1a","first_seen":"2023-03-07T12:10:30Z","last_seen":"2026-08-10T14:39:15.56439Z","times_seen":486,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":532,"dns":0,"connect":27,"send":0,"wait":179,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/images/flags.png","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:22.340Z","timestamp":1786372402340,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /images/flags.png HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 1327\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Wed, 13 Jul 2016 20:09:08 GMT\r\nETag: \"52f-53789f53cc100\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1327,"size_decoded":1572,"mime_type":"image/png","magic":"PNG image data, 32 x 22, 8-bit/color RGBA, non-interlaced","md5":"74322dabf7f91ecee43b164b4526a5c1","sha1":"ec5738246444429f5f9adb8b16447fb4034e891d","sha256":"9a968022f3bbbb6375c1094df0aa5c64acaa1b9a365ed9f828b15fbac37c7c64","sha512":"977fb05ec35ff2ff253528fe3ccefba49ecfdc5382f9b09e40a00c19c0bb604b7b3035c40529432fe617479bfd2087a48dc7e40058e314f1ec549cc416ad0a9b","ssdeep":"","tlshash":"5121d5f28656a263d7f41c8b0c5b80b020a6bb08429689057efd7e7ba419e88b40db44","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.541467Z","times_seen":35,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":176,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.427Z","timestamp":1786372401427,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/jquery.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 32775\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 12 Nov 2018 13:13:39 GMT\r\nETag: \"169d5-57a777825e6c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92629,"size_decoded":33081,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-10T21:49:59.611149Z","times_seen":72054,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":261,"receive":3,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/crdclub.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.435Z","timestamp":1786372401435,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/crdclub.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 808\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Wed, 13 Jul 2016 20:54:12 GMT\r\nETag: \"5ed-5378a96688500-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1517,"size_decoded":1110,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d4c69377f0310f79d83a69544c88643d","sha1":"a774193efc87dd39c3b5d21b42be5431dd741e02","sha256":"511015a1a37007e02d4cb5bbc6d3f6cdedb45f9cb16b8c23d3555d6269ab603b","sha512":"e49407c639755bf3663473ce92b1407370258ee19978c37153677f9760b1ce4c089add9eeb2f449a00d3ec5e76638ab6bdfa6587318ab57beadcc9537458ead2","ssdeep":"","tlshash":"3c31d919f1e211251573b5359b6f9a09b4361047586ccd21fc0e92c49fa662cc6bbfa4","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.547154Z","times_seen":31,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":250,"dns":0,"connect":27,"send":0,"wait":173,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.440Z","timestamp":1786372401440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/yui/yahoo-dom-event/yahoo-dom-event.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 12907\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"8f14-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36628,"size_decoded":13212,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11752)","md5":"f16dcd51fd1d51fac21a9724911184c4","sha1":"5549ff428576843dcbb70b9986e77dfbec09853a","sha256":"d40743d2f62e70a29644f823731551ac1f13903f07f8e0756aa664bb684f276c","sha512":"f754d5b364fd0697ad5f464555ea65ad786aa2e50a514eb0ffed96ef9eb68e1a0285f0f1feff43bab03aff3c8068acc76378c794a798128377a28bf149e38b3c","ssdeep":"768:gO7yLMbTHtxO03JQdPB4OdXkb3pOLVU2mTCTCraPKLIrC0qZbpa:jWLMbTHtM03JaZdXkb3pOLVNlPFrCppa","tlshash":"fbf2f8d937d2787603d6317a006fa605a23ba8d3998851d8e9e2e8c16d7478dc437fbc","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-10T14:39:15.555069Z","times_seen":309,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":264,"dns":0,"connect":27,"send":0,"wait":257,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/images/BluEVO/bg.png","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:22.337Z","timestamp":1786372402337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /images/BluEVO/bg.png HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: image/png\r\nContent-Length: 12493\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Thu, 07 Jul 2016 23:40:20 GMT\r\nETag: \"30cd-53714357fe100\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12493,"size_decoded":12740,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 235x235, components 1","md5":"5d8cfa2f0494f4d51cb84dbae2341fbd","sha1":"2491b562d1938011ca0285d519fccc638fec3151","sha256":"0cfb718d3e327efc24d363ad41da72fc05fb6dbbf921c121af8fd78b1a34cd2f","sha512":"3868961ad4209c4982c333dbc8057df3501caa223d7a6d0dc35d6e4bef1e0dcb48d068ff5f32b4a79149d62fc8d86711e6f46d9a9d9f3b6a4cec3855e06ff775","ssdeep":"192:xYNMtKw/ubCDY5q5VMERkATmBdC+LPJvzTeinacL56ObQ9bNmzVMTnp55:xYNg7/uW4qrbAC4acLYObQVmST75","tlshash":"0742be768f0b357bc2b3e37812d14bc991db3a3567f6f71a568223150499d828c8f0b8","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.56083Z","times_seen":31,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":27,"send":0,"wait":253,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery.cookie.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.434Z","timestamp":1786372401434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/jquery.cookie.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 421\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 12 Nov 2018 13:13:58 GMT\r\nETag: \"2dc-57a777947d180-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":732,"size_decoded":723,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with no line terminators","md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-08-10T14:39:15.563049Z","times_seen":1904,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":250,"dns":0,"connect":38,"send":0,"wait":174,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_global.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.443Z","timestamp":1786372401443,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_global.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:22 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 8132\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"65ac-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26028,"size_decoded":8436,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25316)","md5":"7fca43b6c0e4fcbfcaae98776bf3579e","sha1":"20b8b57b543e0e041b19d5457eca3be99af3da89","sha256":"ba9eadb7cbded72cf37c9249b43f9ddf9ac25ac1e981b3a1a572eb83876ae9aa","sha512":"20d8a4b61de7fd954295946f0051bd7cdbd9032309da401efcaec606dbe553a67f6aa6aaccaa84a8b502bef038374a25826230b2722f7e4d35b0899e44812b1c","ssdeep":"768:BzDP6MPks49ZGI8CNk2Zqs1nlwD6mlRO5/pbJxpivDloLX7:YEks49sI8CNLZqnD6mlRO5x1xpivDlsr","tlshash":"8ec209113a68697743fe91a51cef4509b1792d314a19a0a4e04ce6f538b0f8783ebfac","first_seen":"2023-06-28T09:14:43Z","last_seen":"2026-08-10T14:39:15.56373Z","times_seen":32,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":345,"dns":0,"connect":27,"send":0,"wait":178,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/vbulletin_important.css?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.425Z","timestamp":1786372401425,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/vbulletin_important.css?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/css\r\nContent-Length: 598\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"6b3-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1715,"size_decoded":893,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"3de52290a2c800b556f8112274d6509d","sha1":"f0e612471ae900ed9dcdce5677f950f04e524b3b","sha256":"e6dc4a08dde0ed1fbd3fb0c40d685f825047d4f71953f114738e01d5e60e4222","sha512":"9ece86b43163cdd235223f6b136799e8fec75f4989a3c1a717e5429367c7d0d20d24ddb4a0f7a754eef8bb32c680269b917b554bdd663298dbc11e9d5fdf6103","ssdeep":"","tlshash":"9131cedc0ea132555721cb7f1bb22311cd6780306dc3a99ffcaca44251c9375266d64a","first_seen":"2025-06-01T03:04:05.093697Z","last_seen":"2026-08-10T14:39:15.557858Z","times_seen":15,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":177,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/jquery_em.min.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.428Z","timestamp":1786372401428,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/jquery_em.min.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 1191\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 25 Jul 2016 20:29:08 GMT\r\nETag: \"a5d-5387ba2dbcd00-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2653,"size_decoded":1494,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2361)","md5":"5b1f43de753f1692cc9cb306acd05349","sha1":"8cde8afe7b0c21e2c0abb001f3bf6016a4b27308","sha256":"1cbeb4f61de9a2d2765edb71cbc04377676ea34d94ca5ac3e2345ff40b1497eb","sha512":"e36d924fb1932aa902366fce4328b686c02a2098095963c147b66b42ca7b85dd0e30419d44a643218ab87b35d063730c7548925f97d69a5177467b939d4b79d6","ssdeep":"","tlshash":"c45185cdb3013150ca7b62b135afef0ea7379450adab5507b62d90122db9949115ff3c","first_seen":"2023-03-14T09:14:51Z","last_seen":"2026-08-10T14:39:15.552254Z","times_seen":31,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":176,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/jquery.arcticmodal.js","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.429Z","timestamp":1786372401429,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /arcticmodal/jquery.arcticmodal.js HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 2112\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Mon, 01 Apr 2013 14:37:42 GMT\r\nETag: \"17e6-4d94d9035d980-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6118,"size_decoded":2416,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (532), with CRLF line terminators","md5":"cef3c1fb1c7f77ae32de5ddecd86f266","sha1":"d77d40d4f82e1c4ded2ba0c4d4d6097307ba76d5","sha256":"7401f047e7a87c22df7f1e1e5413da84bd53b2d5bd6869e6c759325676943d84","sha512":"0a4c002a196bf6b979acca878700744712f4cb425fbd487e6086cda51105f534770ee7eb775f2ffd136c271791d5bf10fa54efced2c84d56a23ec184f536677e","ssdeep":"96:TrlBEiQHg5rr15z8oK4KWaQJE+TfgXwGQJ/NtToYyqhKj9EtsE0JDeL2:FBEiQHMrr15AoK4Ko6wJNtTjyNj9EtsN","tlshash":"ebc1731c7e2f35db90fe3528a02b4a057231b5eaf7164c88f056cd188e69e131471eed","first_seen":"2023-03-07T12:20:53Z","last_seen":"2026-08-10T14:39:15.542191Z","times_seen":449,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":174,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/arcticmodal/jquery.arcticmodal.css","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.431Z","timestamp":1786372401431,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /arcticmodal/jquery.arcticmodal.css HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/css\r\nContent-Length: 303\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 30 Mar 2013 08:58:50 GMT\r\nETag: \"28e-4d92098a56680-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":654,"size_decoded":598,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"def37117c605c3e5ae3368d2d1e8d42b","sha1":"f33d8f201e2b1b50798b31e2e74cd8fb9af63427","sha256":"9d53ab0f38d422c274af1768e45246f52ab01caae916e7b0adee53af87c67166","sha512":"eb7eb16ecb05c8bb5f4bd23d18c08b064d44bd811b17fae4e9e2a80a27881ae84d0cf7750bc0e5e53796498d65ec9cebafddf6e9c57741e02a48b0d8e5eb885c","ssdeep":"","tlshash":"35f0d4591f2d228ab09c93a6b96acec49b3981a2e31500bcf5f0292dd18ca1214b5dde","first_seen":"2023-05-04T06:59:31Z","last_seen":"2026-08-10T14:39:15.543835Z","times_seen":100,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":177,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2crd.su/clientscript/yui/connection/connection-min.js?v=387","fqdn":"2crd.su","domain":"2crd.su","tld":"su"},"ip":{"addr":"46.149.74.99","port":443,"asn":216071,"as":"Servers Tech Fzco","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2crd.su/","date":"2026-08-10T14:33:21.441Z","timestamp":1786372401441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.2crd.su","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jul 2026 21:30:28 GMT","end":"Tue, 13 Oct 2026 21:30:27 GMT"},"fingerprint":{"sha1":"B3:77:61:FD:3A:7E:71:8A:8F:D2:E8:3D:68:1E:D7:34:49:1D:A8:44","sha256":"0B:66:49:A6:56:F1:4B:8E:D8:7E:67:65:9B:13:E6:8D:D1:1A:1F:0D:B0:F6:4B:E7:20:1A:5C:40:3C:AB:6A:34"}}},"request":{"raw":"GET /clientscript/yui/connection/connection-min.js?v=387 HTTP/1.1\r\nHost: 2crd.su\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://2crd.su/\r\nCookie: ccsessionhash=9bae2190d5686b37d4fcd75ba4365d3c; cclastvisit=1786372401; cclastactivity=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 10 Aug 2026 14:33:21 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 3803\r\nConnection: close\r\nUpgrade: h2\r\nLast-Modified: Sat, 04 Jun 2011 09:16:26 GMT\r\nETag: \"2d54-4a4df531e4e80-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11604,"size_decoded":4107,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6004)","md5":"ed935da9668b7350505daa30027a6f44","sha1":"10ebcea9a5b9a89ad271c462fdafb5d012b9af64","sha256":"a0297b3ea37cda46af5a08ed89b1563987e6f6a233286e1a373668776134841c","sha512":"b53009564c3e69ca1803a4f185e647226dbcaecd2bd58a7f0ff00645e475b13f163c3bd243000356843f8dab471c6eb842253cd2f74f9ed4e86155f3b3d853b5","ssdeep":"192:gzADNoHX4dmPXOYeylk25sOzIGDclyBeBUef913P6KnEyCUt:gzADNoHX4d5ylk25sOzlcUjefP3P6Zy5","tlshash":"0e32f936315124f34efe9055857f9f85ba3458972488b49a38e8eccf856cac1c06bfb8","first_seen":"2023-03-08T08:27:38Z","last_seen":"2026-08-10T14:39:15.559556Z","times_seen":338,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":272,"dns":0,"connect":28,"send":0,"wait":185,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"2crd.su","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}