{"report_id":"c2cb1479-ad93-4376-9dd6-f22516882b8c","version":6,"status":"done","tags":[],"date":"2025-11-23T10:44:16Z","url":{"schema":"http","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"title":"Album: pjday [15 files :: 5.11 GB] | CyberDrop","dom":{"size":9799,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6877)","md5":"81bb2c5928a97318a7615ac17851ab46","sha1":"8320f464736daa0a7a1c02e68c355831257ebc3d","sha256":"d67ea1ca571567e87c5889015308aabfd79129f2e54b8313036d2a1bd773c7a2","sha512":"1a05f11b93f876e98ce32b590ac657b99214c0a544a6719cc293dfe3453f7bfbd6d5cd936d7adb910e40d13d80cc23a5738875954a12a6840651c868126e0a1c","ssdeep":"192:K8jzJC6OkpzrIQmp55aTRtJRCgr86Keyg:0L8fyUTR5Cgr8beyg","tlshash":"2812c51155502029f4bb44e2e4a13f4e3b2ad747e79306defac939b8c7c6c62792a258","dom_hash":"domhash333bf409f7d045a6fe25aee07cbe6f01","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T10:44:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":14}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"www.avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.me","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"bb2cdd9a0b.6efc66c9e7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"sun.cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cyberdrop.me","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-11-04","domain_rank":97242,"first_seen":"2019-12-26T15:45:34Z","last_seen":"2025-10-31T05:33:51.460102Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":867,"comment":"","tags":null,"fingerprints":null},{"fqdn":"track-eu.trackingtraffo.com","ip":{"addr":"162.55.236.100","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-12-15","domain_rank":2044907,"first_seen":"2023-08-09T22:11:09Z","last_seen":"2025-11-18T11:57:33.69825Z","alert_count":0,"request_count":1,"received_data":349,"sent_data":755,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2025-11-17T18:32:19.963174Z","alert_count":0,"request_count":2,"received_data":701,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-11-17T08:45:09.148065Z","alert_count":2,"request_count":2,"received_data":814,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"avalanchetremorunfilled.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":152416,"first_seen":"2025-04-23T06:40:38.25194Z","last_seen":"2025-11-21T01:56:04.536616Z","alert_count":4,"request_count":4,"received_data":176876,"sent_data":2654,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.capndr.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-08-30","domain_rank":156902,"first_seen":"2021-08-30T12:51:01Z","last_seen":"2025-11-18T03:36:06.824806Z","alert_count":1,"request_count":1,"received_data":399,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ads.trackingtraffo.com","ip":{"addr":"88.214.206.19","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"domain_registered":"2021-12-15","domain_rank":1783129,"first_seen":"2021-12-15T22:48:04Z","last_seen":"2025-11-23T08:58:22.773699Z","alert_count":0,"request_count":1,"received_data":103307,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sun.cyberdrop.cr","ip":{"addr":"104.21.27.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-23T10:44:17.909847Z","last_seen":"2025-11-23T10:44:17.909847Z","alert_count":1,"request_count":1,"received_data":72577,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-11-16T22:39:01.613573Z","alert_count":0,"request_count":3,"received_data":6935,"sent_data":1788,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"na.nawpush.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-12-21","domain_rank":175362,"first_seen":"2020-12-23T08:18:12Z","last_seen":"2025-11-17T20:47:48.786725Z","alert_count":1,"request_count":1,"received_data":1776,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bb2cdd9a0b.6efc66c9e7.com","ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2025-11-23T00:49:13.395777Z","last_seen":"2025-11-23T00:49:13.395777Z","alert_count":4,"request_count":4,"received_data":70393,"sent_data":10315,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.avalanchetremorunfilled.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":0,"first_seen":"2025-10-25T14:00:32.318448Z","last_seen":"2025-11-19T06:05:22.448154Z","alert_count":1,"request_count":1,"received_data":893982,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.bookmsg.com","ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2020-09-15","domain_rank":169473,"first_seen":"2020-11-24T14:56:32Z","last_seen":"2025-11-18T03:36:06.888748Z","alert_count":0,"request_count":2,"received_data":2251,"sent_data":977,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpushsdk.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-05-07","domain_rank":210235,"first_seen":"2021-05-07T12:03:12Z","last_seen":"2025-11-21T01:57:48.798859Z","alert_count":2,"request_count":2,"received_data":855809,"sent_data":840,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cyberdrop.cr","ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-10-31T05:33:51.039659Z","last_seen":"2025-11-14T08:44:13.500055Z","alert_count":14,"request_count":14,"received_data":320610,"sent_data":7766,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}]},{"fqdn":"androidduvetscribble.com","ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":72185,"first_seen":"2025-05-19T23:31:49.928325Z","last_seen":"2025-11-14T08:44:13.500279Z","alert_count":0,"request_count":4,"received_data":162652,"sent_data":2972,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d50a192c.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2025-04-07T22:53:43.518761Z","last_seen":"2025-11-19T06:05:22.447342Z","alert_count":0,"request_count":2,"received_data":1862,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"caqbmyavw.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-11-23T07:17:08.478427Z","last_seen":"2025-11-23T07:17:08.478427Z","alert_count":0,"request_count":1,"received_data":3189,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"holahupa.com","ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2024-05-14","domain_rank":17290,"first_seen":"2024-05-20T21:30:41Z","last_seen":"2025-11-20T12:49:40.045212Z","alert_count":0,"request_count":4,"received_data":163907,"sent_data":3533,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"playhubconnect.com","ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-25","domain_rank":18094,"first_seen":"2024-10-01T12:19:44Z","last_seen":"2025-11-17T13:55:55.956654Z","alert_count":1,"request_count":1,"received_data":894211,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"nereserv.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-11-17T19:50:51.234094Z","alert_count":2,"request_count":1,"received_data":322,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.wpadmngr.com","ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2021-06-02","domain_rank":77954,"first_seen":"2021-06-02T14:43:46Z","last_seen":"2025-11-18T00:33:32.995848Z","alert_count":1,"request_count":1,"received_data":146781,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"3c77b61cf5.ce82e64744.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2025-11-23T00:33:58.940487Z","last_seen":"2025-11-23T00:33:58.940487Z","alert_count":0,"request_count":1,"received_data":345,"sent_data":835,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9adbe310dbc78464aa866453b256f2","sha1":"b7bba1f7c7eddbda13ecf1b0952de3a392b9e770","sha256":"163e33d6f2786e0c68927a1a7d8b282f606c2f3b6f045bf1840a1c57e6745c28","sha512":"28fac537344ef5bc29be086512ef5d449f1943a291b5b0f6833ed8e9e9b0e5294bed4432c3f8e730e254a8392eb2b457313a001525be7c7566ad7c9d3e3e3572","ssdeep":"3072:vt+5CPB7vcQ7qKEPsvQaEvpiBz3gJ7BWCq1+8Q43XG2nl2LqR9TkK:FSCdcQ716vbFBW3+6hf9TT","tlshash":"0a446bd1369478b00593c0afd0770201b2382609f529b56cbabddeea6586dce2377f79","size":255489,"data":"","first_seen":"2025-11-05T11:28:02.144909Z","last_seen":"2026-04-10T08:08:30.466871Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24a7a45962716a9a9eb4ee96c501d798","sha1":"2bbb6d2f8b84df6bb343b91688931d71dc5b5206","sha256":"ee528d8f754152cf143b6b4909c4cf175eeeba356e32c2b4d3ee3aedc595eb29","sha512":"91cfd4cb9c3db9a88ca7bc8da2f194af52a00c5935eef809196c95bceeb4d09a6e2242524bff5d460579a7f4c7b6b529b981708d09a031dccc7ee7a9cc8fc52f","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWHhMs4h/:JONux6EHOJcFnagwxdMwa","tlshash":"a8d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","size":599544,"data":"","first_seen":"2025-11-05T11:28:02.139245Z","last_seen":"2026-04-10T08:08:30.51488Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f8e3848eda55ff417a9066358732e59","sha1":"c22092d379ce061d1e2fac81d54d5d9fdc9be790","sha256":"0be1ded743ee9c24e616a4e4b1bb0f4cfe28efa55e17eef46cd764d557e527cd","sha512":"4e1834b18401ae7b8b8c26a96b13ca55433cc3d9d4b98731c9e328a491679e1dd55a9419ed7e49b76c3e37353492ed3cd2128cae13b2995b477e59076abe463c","ssdeep":"192:64lb8FKv/Q0FhpnQGru8WgbLX2xlyAYeD5c2AYmf42ffZB9J7ORUksr6aBvWDGz:6W7XnFPnQLPgv2WjeD5c2qfRxBjORUkw","tlshash":"890219b9f253ec6683e48cc9617e6620f42a69053409d054f55cec933866686e3b3f7d","size":8526,"data":"","first_seen":"2025-10-31T05:34:02.10178Z","last_seen":"2026-02-17T21:06:06.404995Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/check.html","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/aas/r45d/vki/2046805/tghr.js","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c2df8a1e5b19a19838a64e9f859334f","sha1":"dffeaabc0c18f8cd0ed89091c5df396a88ad55ba","sha256":"0cdb0e0330fbdb1f675a43e7581325ea554dd5e54be237c832849cfda25d4a36","sha512":"d513f11f76dc49cb208365ba53cbc08964846bbbcbf92c453c9d36f52c2980f8f696ec430823ab85a0a0dd10b2edf72475da98105412a88b4711f17cc2f9e743","ssdeep":"1536:OhFi9uwX4u7bbP/gUds+NJy93xA3o3Qc6dgsPShdMn6hmKn0/XHUynP8MWL+WA6:OhgHJbbgEwLA3o3Qctp0PUVPA6","tlshash":"21e3a58caea7a0354206a469083b7a0f632b17d1ed6d40c494b7f5c83d6f446e916ffb","size":154930,"data":"","first_seen":"2025-11-19T06:05:31.716251Z","last_seen":"2025-11-23T10:44:25.792289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/get/2046805?zoneid=2046805\u0026jp=_clacghpzbsdogkavgklqbx\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ShxjofZaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=5182148179544576\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C7937%2C3883%2C735%2C3665%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"30e9b61eeb0e8f4e040f2c73a1513e4b","sha1":"03bea7a7f66976580e9314761a0e74fb7586f9ce","sha256":"34485ac98fb3ef1f61e8e0d297a8dbe6dad792d1f00a9e6cfdfb5a2e76606ac2","sha512":"133ac465106c53491baf1a89e2bcb2dd26773ce8ea64bc4c13f427ed08df82d3211ffc711eca98a01fdb4394d64e3f738ac1ad63d421993c912cd6221bf28203","ssdeep":"","tlshash":"2e418696e4e8cda742f4cd8c32a59fd6350c0266961bb6390974ffdc94580f115dee83","size":2165,"data":"","first_seen":"2025-11-23T10:44:25.834537Z","last_seen":"2025-11-23T10:44:25.834537Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caqbmyavw.com/fabomjv/hic?9LAl=NDw\u0026cj=4\u0026ua=hf\u0026sfuf=rnpes\u0026oj=403063\u0026fnl=2\u0026xcersn=690136\u0026yx=3852193\u0026blcv=jxhw\u0026io=_jblkrqlajrpojhrywxuskp","fqdn":"caqbmyavw.com","domain":"caqbmyavw.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3f6ab29dfac39e3317757f9e42f73f6","sha1":"2927d83ad373134d7fa977c691fffef42d44cf36","sha256":"9c4e4957dc93046f0246cf5b8fa09a200b6e1f486ebd45d7ecbcc528db1214ff","sha512":"ebf64b439d98bfead3c713dce1790f6c3315ba3f7a1cf48f59e18be841b35e30bebf15c8765285e0a14f95cc42de986c4d42c86d62b3c80858fd52400a971164","ssdeep":"","tlshash":"e541bdbfdcb484a2ed5c0f6a15fe7c866c7e0a93082b52061f70e51453a977067730d1","size":2152,"data":"","first_seen":"2025-11-23T10:44:25.82129Z","last_seen":"2025-11-23T10:44:25.82129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/js/misc/utils.js?1117213","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"039674e4481d1e2fd7f160f241967134","sha1":"3ccf618c93ad1ad0e7bfcfca20db1a90fe10de59","sha256":"9f230bbd87c2d9e71004c405d5623bc2c9d2371d803ee4f7f9545fcd7902eb8f","sha512":"61f7c3d484c07b34a960a68fd5d9949b9c18fef51abdfd9ade74b48ff204e04c4ec6055de5b83be605d5c252f904f18b0a1b01963fd53f939fb71b8af552e9da","ssdeep":"","tlshash":"313153b290f1a62381d758936a6c41d46c1049472556437cf703c2a661f4c8f82ceff5","size":1569,"data":"","first_seen":"2024-01-21T23:06:43Z","last_seen":"2026-07-11T01:49:34.055096Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/libs/lazyload/vanilla-lazyload@12.0.0.min.js","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"81a54a116c4b5f257f0c296bb023e915","sha1":"23167641c90ec1587c30c71625cedaa7f5701a1e","sha256":"1e3bbf2a6d9503811213baca9f5e309618ca968136199ca532a0a5167c0b0f1c","sha512":"4780001f1c40a3fe3df9dbb3716a4f79476b3352353db3a78e46021c8a7b62b1a753dd19641f511a3df876971f8306437bce63fbc6063f511d0c5e3f28e793d4","ssdeep":"96:IncwFK9HqOq0tioPJUjBx7Pwuyrzhgrk7MeS1h3osSTqDgeK6gY/Zl511QDSHRV9:M9YH9qEJ+x7Pw3hmkVSPfuQRP1GDsP9f","tlshash":"95b1324cb065b43f257b7032122f130bb13ba46778894490f674dae99ebc85e6923e7d","size":5585,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-09T22:40:52.824434Z","times_seen":1180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"74191a1609cd4d3a2b9aa52178799022","sha1":"2e929a0196998cec62a6e496f7d16a5ec3365e2c","sha256":"5d33e46216b72a6dab37b5369b5264c5fe3c1db2cfe44ca6d2be316c371b9834","sha512":"09355b92325bb24e0f131106901dcb19fa4c602831fb0e79414529e975922b5a7e10ec5f5b600e38772db427510777825a2d357fe0f61f45179e566aaa71fa45","ssdeep":"192:64lb8FKv/Q0FhpnQGru8WgbLX2xlyAYeD5c2AYmf42ffZB9J7ORUksr6aBvWDGB:6W7XnFPnQLPgv2WjeD5c2qfRxBjORUk6","tlshash":"8c0219b9f253ec6683e88cc9617e6620f42a69053409d094f15cec933866686e3b3f7d","size":8530,"data":"","first_seen":"2025-10-31T05:34:02.103396Z","last_seen":"2025-11-23T10:44:25.842638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b7f0ad621d58b43f0f9b7076c52d0fa","sha1":"d911b14f5b33b7c0b8ba8586781a63d4a3da6778","sha256":"a553868ba422ed73d3cb24e56c4b72e9085941e7bcc4b59cd27768d99ada6650","sha512":"7c080b89425c1032229ac2f03cb7aacb15fedaa5736de3430c8d4c0c9005a88d367961afa22e69912b06967ae1e10cef83da0a287682a62c657d963e3b068379","ssdeep":"","tlshash":"15d02218143c30388bbd208ea15882836ad400aaf65856c2012b090124f00c5072e8cb","size":198,"data":"","first_seen":"2023-03-07T12:27:22Z","last_seen":"2026-06-02T03:09:22.433146Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"eventHandler","is_inline":false,"md5":"23e55f4c7e469bc3e475042b11a6ab01","sha1":"4361eb929b5357a60c6c7e6bb026a370e9ed11f7","sha256":"4fc9462f625928a0adadbfd1dd2e134e4f0f684ce9220de44ef4b454618db43b","sha512":"d987c96cca1555e11603483b2b627045a25a8335f2fac43cc9165c8ed3f4813aeab996d5616a692b6dc9a14954c065c302d428054e4aae9f21c64898a6e7f45f","ssdeep":"","tlshash":"2560000f0303c0cc030c00000000000300cc0000300c000000c00c0000000fc000303c","size":12,"data":"","first_seen":"2025-10-31T05:34:02.104244Z","last_seen":"2025-11-23T10:44:25.844621Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/on.js","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbfe0538eea0082ceddf9b3865adddee","sha1":"c0eefc510ed02dd390d3207d2ba019527b765961","sha256":"990eeb4c171f598a11168462220a4e5c8ac6b633541db5f3b7f806dfc392d3c3","sha512":"ae4bec7a3116540789ab50a7a038927d23a542d1cc53a4e8c6c3d64a2cdf3455bd0b36f0d3b0c307a6f5c4e366e2ac6a85a4b3210703fbf0ef894927bbb305ec","ssdeep":"1536:Zr99edSf1mHoH41wszIkopbfynmEDzcOJlhenn+ggar+rmk9E/ydzBY1AAt:ZreS10oHiRIkYbfyYOJvrmnTt","tlshash":"f1e3768cfa4b2435426fb0794c2f662ade27c8d1a45dc0c6d8abd1d93d789069131efb","size":154927,"data":"","first_seen":"2025-11-17T20:23:14.342378Z","last_seen":"2025-11-24T09:31:58.868453Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/get/2046805?zoneid=2046805\u0026jp=_clacghpzbsdogkavgklqbx\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=lYZwG7taHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=4337723249507328\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C21368%2C5274%2C784%2C5056%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c172ff408acfd17ab3eb865bcf7788c7","sha1":"36d191461e259a7e238e65028abd48d7940a6be2","sha256":"3d2b468e93c09402097cb38f552f2a41481b72dce894939e787fe5dded466b4c","sha512":"66f51b0f6db8f4ffd14b0642bea380f4a95a887be5f95056cc6457fb5d53cc5d6f3056ca0656f7e912ece2242804b002e692d57a956a8d3226f26eeca2e8eef2","ssdeep":"","tlshash":"466185d49094c8fd06afcb1c212ebcfadcca74927a7a891a8356d84684d0c3dcf3d012","size":3232,"data":"","first_seen":"2025-11-23T10:44:25.835719Z","last_seen":"2025-11-23T10:44:25.835719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/bn.js","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b243f8abd44fa1fc6319522490d1baf","sha1":"6e9a97341d786420936760dda795855918d40a2c","sha256":"88c1b82db7a1d9ae6105362d290f870d903887415d7e0318dc3b6e455f9fa739","sha512":"26c2d950afafd6f5abe41ca93b73b4671a49ef2996dfca5305ed24696aa73d903eae2011128f166b37d6bd3c3748efc3a57a5c44e09bbb79a41b9c8d93c4a0c4","ssdeep":"1536:yJ+nzjXtfFtrpC16823x1Ii0dR3KuDChe2DPWY6DqrZo2Nrjogx+9exUOonmC89G:yJyzjXtpThhy3sOZDCHFahy+7p","tlshash":"adf3e74cffc1e831814bf03a683fd500677958f3d55e4088b83ed8e4ab65b5da271aa6","size":168034,"data":"","first_seen":"2025-11-17T15:00:17.749909Z","last_seen":"2025-11-24T04:57:33.721951Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2f0972afc8bc1fe3b080eb543a86b47","sha1":"ab71ef7d872e2a44f4aef851853fdf259f2fd746","sha256":"8c001a2bddac6af4af1e5aedba188d8fd9fd355208562fea36994d1418aadc68","sha512":"449884607fa6eb4ce120b484a0f3da066fa83bdc5f3bc14eb656d96606b9b47733d67876887b9218582b71d6b7445d8e55eab7adec3fc2463f2d6cce97eb22bf","ssdeep":"1536:ZaN12toXV0jtQyFem169zKKpKf7xbAQ9c+ts4aAUOPEH9ZoxlB5RnWM8k8MdnCjH:5Pemo9GqK9coDts0KnoxlTA7+da","tlshash":"78e34acdb2d2b07407e75059d83f1207b73a1a16b80c9058f6a6e9c17878dda9237f7a","size":146393,"data":"","first_seen":"2025-11-06T14:45:06.101541Z","last_seen":"2025-11-27T11:34:20.174539Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/js/album.js","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"09b51a13b89404f438f227e0a7093b75","sha1":"b7ceaec402bf03985dfba0751fae736d7a295aae","sha256":"285d198ea9b06d9caedd24030ae639fa888dd1674cb7f7a07f80f01f675b7dee","sha512":"0c33447894e4c2bd4b0b2b6d4912576bc0bd1e5c379509c61f6b424dffd8f225da3cd01694b95904017b2f9d167333af71cc6c36ed6b301974af1b05f6534240","ssdeep":"","tlshash":"36014779f439583a2226095ff9e643c9aa245c8bb9808188f80c90c638f1c4695e2eb6","size":667,"data":"","first_seen":"2024-08-20T11:33:05.843295Z","last_seen":"2025-11-23T10:44:25.805923Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"eventHandler","is_inline":false,"md5":"693b98dd50f3560e5724aee58985340a","sha1":"c8970892c46b415a1da09f336054bba409ef18ed","sha256":"41a4e50a8a10d468cdbabb9aae0dc5b89ff2f85e890f62fb26cd9716c12402fc","sha512":"e2521a9be86de52190bf20fb4131b671296669e4b894fbf1c50aedd7199a4f23fa337fb6f1b7e08f99599ecad2880592e6c4cf78b165a2e738683108ad947290","ssdeep":"","tlshash":"12500033000cc30300000000000000000c000000030000c003303000f0000000003000","size":9,"data":"","first_seen":"2025-10-31T05:34:02.102624Z","last_seen":"2026-02-17T21:06:06.407328Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/check.html","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2021514?id=2021514\u0026jp=_clbyessbcfrosmnzhwmigo\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=wpbIgB0aHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=1522973482342400\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1253\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe3641ed80c3a90d3c2ae14cfb6e9497","sha1":"6f4336e97fe100fa80e9f2a3753ab97d151977c7","sha256":"a86eb60a45518e6e0b485b9a085d59d649f8cb2bda741334e417e7fa3233224a","sha512":"0a03385a479c8eade0eefc22a2d1f331faf5baac79a3391aa20abf70ce24d35e23f9307b3ab5dc01694e77cde1eba420bdee85b0110be55fcddbbe5b323892fa","ssdeep":"","tlshash":"0461a6bced5dd8e19da464042e37dfc6f9c029ebe9335d01e887c8b5f8858b14632480","size":3252,"data":"","first_seen":"2025-11-23T10:44:25.838224Z","last_seen":"2025-11-23T10:44:25.838224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/get/2069120?id=2069120\u0026pid=__clb-spot_2069120_mmt_1\u0026jp=_clftfdsfxpwytglctnqyym\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=NHlCCPUaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=3211823342613504\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1368\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2818162b7dcded54c7e335172a7442d8","sha1":"453fe5c44c0ed8089d2330af465b53ce00104e98","sha256":"8609e46483e5c3096dcf476a6bf38974da19b85ac025750849c21a73a1282afd","sha512":"fdfc0bdb059d77f397842d846684563d676ea1e49a15e661b24279654b829349dc6e6d9ab57ebf9b57ecc792845b383f5d1f5cfb468d357c013637f19c2bb4f7","ssdeep":"96:2E2eajnAeey+LeajnAeey+0eajnAeey+4eajnAeey+yCzYccyMtSo:2E2dnAfyMdnAfyjdnAfyFdnAfytOYcVY","tlshash":"fab10aaac91367497a2a5b11a9b38d55f0bb12930d3d25e5133cf883803c031ce09fde","size":5197,"data":"","first_seen":"2025-11-23T10:44:25.813842Z","last_seen":"2025-11-23T10:44:25.813842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"holahupa.com/aas/r45d/vki/2046805/tghr.js","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"GET /aas/r45d/vki/2046805/tghr.js HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-25df4\"\r\nx-js-ab2: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154930,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6c2df8a1e5b19a19838a64e9f859334f","sha1":"dffeaabc0c18f8cd0ed89091c5df396a88ad55ba","sha256":"0cdb0e0330fbdb1f675a43e7581325ea554dd5e54be237c832849cfda25d4a36","sha512":"d513f11f76dc49cb208365ba53cbc08964846bbbcbf92c453c9d36f52c2980f8f696ec430823ab85a0a0dd10b2edf72475da98105412a88b4711f17cc2f9e743","ssdeep":"1536:OhFi9uwX4u7bbP/gUds+NJy93xA3o3Qc6dgsPShdMn6hmKn0/XHUynP8MWL+WA6:OhgHJbbgEwLA3o3Qctp0PUVPA6","tlshash":"21e3a58caea7a0354206a469083b7a0f632b17d1ed6d40c494b7f5c83d6f446e916ffb","first_seen":"2025-11-19T06:05:31.716251Z","last_seen":"2025-11-23T10:44:25.792289Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":37,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.avalanchetremorunfilled.com/static/video/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4","fqdn":"www.avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /static/video/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4 HTTP/1.1\r\nHost: www.avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 893503\r\nlast-modified: Sat, 15 Nov 2025 18:52:28 GMT\r\netag: \"6918cbec-da23f\"\r\nexpires: Thu, 22 Jan 2026 10:43:55 GMT\r\ncache-control: max-age=5184000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-expose-headers: Last-Modified\r\ncontent-range: bytes 0-893502/893503\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":893503,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"df7722471047d1868385d3c71b777260","sha1":"ba936a047c1b983e1a14a47eba40bfb48ae2dbc5","sha256":"6eef643ed38be4036db1bb4f2447f35c886d8ece2b4aff0922598e413216d1fa","sha512":"20792c2370847b7100e0d18d5168319beae0bd8190459df32b456a72fcd32e2739fdff6533d31b50e0727e290229800424482ba450ba632ddcc2b4cc4afcc155","ssdeep":"24576:1rRxYA0lJEwTkVvqWGL4jByMfI8doc/TKA+rj:T+A0lJEwMmL4jByYo8Ts/","tlshash":"251522b312c11c6be6286b3798e716d763d9cd6561328e02b44d70311bf49ea2f2bdd4","first_seen":"2025-05-09T01:45:52.872445Z","last_seen":"2026-05-12T14:56:11.804301Z","times_seen":2321,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":20,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"www.avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-42a\"\r\nexpires: Mon, 23 Nov 2026 10:43:55 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a11e13b2bd67bb9a6cb347d7c73df13","sha1":"b85460a33f9b229f42c08a6a94ae433a4d5c32ab","sha256":"1d0d6b5176d6a48b3042a107f929bbfcefd4a057273ac488bbb7f7affd909b56","sha512":"059dd018bbf13a669d73f07442288f165bc6b305afb0df955773a0efb7454b8204095196231179fab4cb625e189c7c735fe41dc5b67fb8666d584214277186e6","ssdeep":"","tlshash":"7511b56be46c4dfede41f0408dd80256f8324a5c8aaeaf39058bc7da4f584143a6f01a","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-07-08T06:57:41.666132Z","times_seen":11492,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":83,"dns":26,"connect":19,"send":0,"wait":22,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":81,"dns":13,"connect":25,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=196027","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=196027 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1970\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1970,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":165},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":79},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":1},\"timezone\":{\"value\":\"UTC\",\"duration\":0},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":1},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":31},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Sun, 23 Nov 2025 10:43:54 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://cyberdrop.cr\r\nSet-Cookie: id=8090422020932813975; Expires=Mon, 23 Nov 2026 10:43:54 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-06-07T07:46:29.043892Z","times_seen":7033,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":13,"connect":26,"send":0,"wait":25,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/skins/nmain.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:32:11 GMT","end":"Sat, 31 Jan 2026 07:32:10 GMT"},"fingerprint":{"sha1":"5D:B0:51:22:B4:86:47:42:74:7D:68:50:E7:C9:08:D7:7B:41:91:8C","sha256":"09:01:AE:7A:8E:97:6A:90:A0:1C:ED:8A:B0:05:D4:B3:89:1C:C9:7F:8A:21:8B:8D:59:7F:5C:48:74:65:0E:99"}}},"request":{"raw":"GET /skins/nmain.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Nov 2025 11:07:05 GMT\r\netag: W/\"690b2fd9-925f8\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 23 Nov 2025 10:48:55 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599544,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"24a7a45962716a9a9eb4ee96c501d798","sha1":"2bbb6d2f8b84df6bb343b91688931d71dc5b5206","sha256":"ee528d8f754152cf143b6b4909c4cf175eeeba356e32c2b4d3ee3aedc595eb29","sha512":"91cfd4cb9c3db9a88ca7bc8da2f194af52a00c5935eef809196c95bceeb4d09a6e2242524bff5d460579a7f4c7b6b529b981708d09a031dccc7ee7a9cc8fc52f","ssdeep":"12288:EiO6pTQUIfDchOHO68RPO2Si6EHlPUfQC+dKJTowRinDGQf7jbLExMLPWHhMs4h/:JONux6EHOJcFnagwxdMwa","tlshash":"a8d45b313290113870bfc8c6aa66278d336cf24be9174f55f96faaa583dbd54f625380","first_seen":"2025-11-05T11:28:02.139245Z","last_seen":"2026-04-10T08:08:30.51488Z","times_seen":352,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bookmsg.com/creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp","fqdn":"static.bookmsg.com","domain":"bookmsg.com","tld":"com"},"ip":{"addr":"45.133.44.24","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.bookmsg.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 02:32:15 GMT","end":"Fri, 26 Dec 2025 02:32:14 GMT"},"fingerprint":{"sha1":"69:D4:87:E8:98:FE:00:16:8C:D3:50:CF:9D:9C:90:39:E8:BA:25:24","sha256":"B7:66:1B:B1:4A:54:D5:C6:EB:8C:46:AC:AC:EE:34:E5:FD:C8:BD:42:18:97:40:49:28:DF:BC:31:42:43:04:50"}}},"request":{"raw":"GET /creatives/SG/SG_083be47dfc3e28c9a68305b76181a5033bc45790_icon.webp HTTP/1.1\r\nHost: static.bookmsg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nserver: nginx/1.24.0\r\nlast-modified: Fri, 31 May 2024 10:56:43 GMT\r\netag: \"6659aceb-1e6\"\r\nexpires: Mon, 23 Nov 2026 10:43:55 GMT\r\ncache-control: max-age=31536000\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ceeb4e8840c24621c0e0352b42b38a5b","sha1":"03cbceb0134a39267014595938705e2916580644","sha256":"50cb77ae9715629235f102dd53a68559df1b64416f71179dbb4aa942725790b3","sha512":"80d4128488580567597ba5eb65dbff2dd4a8efc625c64cac6a027a1bb5c229545206669f04a50a252b54f471bee4fdc892e6bfe8347a50dd216bba67bd671a03","ssdeep":"","tlshash":"9bf00544191cd36c2a3c607afd74eb74a4074aa459226017cce447b08956811e856c1c","first_seen":"2024-02-20T18:30:33Z","last_seen":"2026-07-08T06:57:41.67562Z","times_seen":11507,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":80,"dns":27,"connect":19,"send":0,"wait":19,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/favicon-16x16.png","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=xuvrWmiLvw7FaAUc; __ddg10_=1763894634; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YIiBy8qWccd68B5C; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\n__ddg10_=1763894634; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 14 Nov 2025 07:58:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 621\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"26d-18f97589171\"\r\nage: 787554\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"81383dcd41a1f718cc35ccc2f038535a","sha1":"6215ef85992da43e12e94d20a4342515b69fbd66","sha256":"22a9c77ff040f56b8141a10de61c3677d6dc52434250c6ec100c00328a6dc929","sha512":"b2c028417711e37c9b612a13355a78bddd996acdd7d610bbbb1acb6aea02c64e81bf1fb14e290ed6a5ffcd535565dd4c41193f68d1b3563ce3afb7b14e2a08dc","ssdeep":"","tlshash":"3ff0624417450cbc4a8cde26cdacd8a907a3018d63a8200bcf8beb3d9a232280c24a21","first_seen":"2023-05-09T09:48:31Z","last_seen":"2026-07-11T01:49:34.063039Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/on.js","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:50 GMT","end":"Wed, 21 Jan 2026 14:23:49 GMT"},"fingerprint":{"sha1":"E9:28:A4:8C:0F:4E:25:88:BF:F6:CA:48:D5:03:97:AD:CC:50:A9:29","sha256":"B3:49:9E:D1:5F:3D:B4:77:B7:0B:91:37:97:BA:D2:DE:6A:BC:F7:7A:4D:70:AB:EE:F6:3C:DC:55:0D:18:7D:0F"}}},"request":{"raw":"GET /on.js HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-25d2f\"\r\nexpires: Sun, 30 Nov 2025 10:43:53 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fbfe0538eea0082ceddf9b3865adddee","sha1":"c0eefc510ed02dd390d3207d2ba019527b765961","sha256":"990eeb4c171f598a11168462220a4e5c8ac6b633541db5f3b7f806dfc392d3c3","sha512":"ae4bec7a3116540789ab50a7a038927d23a542d1cc53a4e8c6c3d64a2cdf3455bd0b36f0d3b0c307a6f5c4e366e2ac6a85a4b3210703fbf0ef894927bbb305ec","ssdeep":"1536:Zr99edSf1mHoH41wszIkopbfynmEDzcOJlhenn+ggar+rmk9E/ydzBY1AAt:ZreS10oHiRIkYbfyYOJvrmnTt","tlshash":"f1e3768cfa4b2435426fb0794c2f662ade27c8d1a45dc0c6d8abd1d93d789069131efb","first_seen":"2025-11-17T20:23:14.342378Z","last_seen":"2025-11-24T09:31:58.868453Z","times_seen":157,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":53,"dns":19,"connect":17,"send":0,"wait":17,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/libs/lazyload/vanilla-lazyload@12.0.0.min.js","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /libs/lazyload/vanilla-lazyload@12.0.0.min.js HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sJjLlGrO5koiMLic; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 22 Nov 2025 13:58:02 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"15d1-18f97589219\"\r\ncontent-encoding: gzip\r\nage: 74751\r\ncontent-length: 2145\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5585,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5543)","md5":"81a54a116c4b5f257f0c296bb023e915","sha1":"23167641c90ec1587c30c71625cedaa7f5701a1e","sha256":"1e3bbf2a6d9503811213baca9f5e309618ca968136199ca532a0a5167c0b0f1c","sha512":"4780001f1c40a3fe3df9dbb3716a4f79476b3352353db3a78e46021c8a7b62b1a753dd19641f511a3df876971f8306437bce63fbc6063f511d0c5e3f28e793d4","ssdeep":"96:IncwFK9HqOq0tioPJUjBx7Pwuyrzhgrk7MeS1h3osSTqDgeK6gY/Zl511QDSHRV9:M9YH9qEJ+x7Pw3hmkVSPfuQRP1GDsP9f","tlshash":"95b1324cb065b43f257b7032122f130bb13ba46778894490f674dae99ebc85e6923e7d","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-07-09T22:40:52.824434Z","times_seen":1180,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"playhubconnect.com/bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4","fqdn":"playhubconnect.com","domain":"playhubconnect.com","tld":"com"},"ip":{"addr":"104.18.14.39","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"playhubconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Nov 2025 04:50:46 GMT","end":"Wed, 11 Feb 2026 05:50:34 GMT"},"fingerprint":{"sha1":"08:40:B9:AE:36:A1:74:E1:BA:0F:75:D5:97:DA:7B:24:68:4A:EC:AF","sha256":"A8:FB:61:7B:C9:91:75:23:4D:3A:56:E0:47:39:85:A1:36:66:5A:69:9F:F6:18:D0:70:9B:87:10:19:BC:7D:0D"}}},"request":{"raw":"GET /bn/ba9/36a/047/ba936a047c1b983e1a14a47eba40bfb48ae2dbc5.mp4 HTTP/1.1\r\nHost: playhubconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 893503\r\ncf-ray: 9a30117b8d295687-OSL\r\nx-amz-id-2: 0svUZMc2Lq98EidBfw11PA0pOn1dXWaJC9u2gDLhYO6s/F9aa4y+qroXCZh/f1zqATK9vuZj0752fl3VU8Z2WPvEPHq9tjC5mZULWoMqGP4=\r\nx-amz-request-id: 7CMMWS4G41P7PJXS\r\nlast-modified: Thu, 15 May 2025 12:07:44 GMT\r\netag: \"df7722471047d1868385d3c71b777260\"\r\nx-amz-server-side-encryption: AES256\r\ncf-cache-status: HIT\r\nage: 376046\r\nexpires: Wed, 24 Dec 2025 10:43:54 GMT\r\ncache-control: public, max-age=2678400\r\ncontent-range: bytes 0-893502/893503\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":893503,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"df7722471047d1868385d3c71b777260","sha1":"ba936a047c1b983e1a14a47eba40bfb48ae2dbc5","sha256":"6eef643ed38be4036db1bb4f2447f35c886d8ece2b4aff0922598e413216d1fa","sha512":"20792c2370847b7100e0d18d5168319beae0bd8190459df32b456a72fcd32e2739fdff6533d31b50e0727e290229800424482ba450ba632ddcc2b4cc4afcc155","ssdeep":"24576:1rRxYA0lJEwTkVvqWGL4jByMfI8doc/TKA+rj:T+A0lJEwMmL4jByYo8Ts/","tlshash":"251522b312c11c6be6286b3798e716d763d9cd6561328e02b44d70311bf49ea2f2bdd4","first_seen":"2025-05-09T01:45:52.872445Z","last_seen":"2026-05-12T14:56:11.804301Z","times_seen":2321,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":11,"receive":52,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"playhubconnect.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/bn.js","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /bn.js HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 17 Nov 2025 14:23:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b2fe3-29062\"\r\nexpires: Sun, 30 Nov 2025 10:43:53 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168034,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2b243f8abd44fa1fc6319522490d1baf","sha1":"6e9a97341d786420936760dda795855918d40a2c","sha256":"88c1b82db7a1d9ae6105362d290f870d903887415d7e0318dc3b6e455f9fa739","sha512":"26c2d950afafd6f5abe41ca93b73b4671a49ef2996dfca5305ed24696aa73d903eae2011128f166b37d6bd3c3748efc3a57a5c44e09bbb79a41b9c8d93c4a0c4","ssdeep":"1536:yJ+nzjXtfFtrpC16823x1Ii0dR3KuDChe2DPWY6DqrZo2Nrjogx+9exUOonmC89G:yJyzjXtpThhy3sOZDCHFahy+7p","tlshash":"adf3e74cffc1e831814bf03a683fd500677958f3d55e4088b83ed8e4ab65b5da271aa6","first_seen":"2025-11-17T15:00:17.749909Z","last_seen":"2025-11-24T04:57:33.721951Z","times_seen":85,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":53,"dns":19,"connect":23,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/js/album.js","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /js/album.js HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=X9HuqABGMPMYgBrn; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 18 Nov 2025 18:43:24 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"29b-18f97589269\"\r\ncontent-encoding: gzip\r\nage: 403229\r\ncontent-length: 350\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":667,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (632)","md5":"09b51a13b89404f438f227e0a7093b75","sha1":"b7ceaec402bf03985dfba0751fae736d7a295aae","sha256":"285d198ea9b06d9caedd24030ae639fa888dd1674cb7f7a07f80f01f675b7dee","sha512":"0c33447894e4c2bd4b0b2b6d4912576bc0bd1e5c379509c61f6b424dffd8f225da3cd01694b95904017b2f9d167333af71cc6c36ed6b301974af1b05f6534240","ssdeep":"","tlshash":"36014779f439583a2226095ff9e643c9aa245c8bb9808188f80c90c638f1c4695e2eb6","first_seen":"2024-08-20T11:33:05.843295Z","last_seen":"2025-11-23T10:44:25.805923Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.me/css/fonts/unica-one.css","fqdn":"cyberdrop.me","domain":"cyberdrop.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 00:18:26 GMT","end":"Mon, 02 Feb 2026 00:18:25 GMT"},"fingerprint":{"sha1":"3A:D1:51:16:3D:1C:76:51:5E:9D:12:C4:78:1C:7C:68:FF:3E:60:F7","sha256":"B8:DE:C5:20:4E:0E:36:BF:C0:CD:2F:C9:EC:1B:6C:B3:4F:EA:1A:AE:BA:A3:3E:0D:A5:82:E7:7B:1C:76:C1:26"}}},"request":{"raw":"GET /css/fonts/unica-one.css HTTP/1.1\r\nHost: cyberdrop.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":347,"dns":132,"connect":106,"send":0,"wait":0,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.me","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=1\u0026event_id=fd796bac-1461-4594-af75-7c4ec4cc6b0f\u0026subid=1244929212\u0026sid=527480306\u0026spot_id=823316\u0026created_at=2025-11-23\u0026timezone=0\u0026ver=8.243.4\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=1\u0026event_id=fd796bac-1461-4594-af75-7c4ec4cc6b0f\u0026subid=1244929212\u0026sid=527480306\u0026spot_id=823316\u0026created_at=2025-11-23\u0026timezone=0\u0026ver=8.243.4\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/get/2069120?id=2069120\u0026pid=__clb-spot_2069120_mmt_1\u0026jp=_clftfdsfxpwytglctnqyym\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=NHlCCPUaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=3211823342613504\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1368\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /get/2069120?id=2069120\u0026pid=__clb-spot_2069120_mmt_1\u0026jp=_clftfdsfxpwytglctnqyym\u0026dr=52\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=NHlCCPUaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=3211823342613504\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1368\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026bp=1\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\nUID=2511230543fab9a925d6874956b14981ff60; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5197,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5197), with no line terminators","md5":"2818162b7dcded54c7e335172a7442d8","sha1":"453fe5c44c0ed8089d2330af465b53ce00104e98","sha256":"8609e46483e5c3096dcf476a6bf38974da19b85ac025750849c21a73a1282afd","sha512":"fdfc0bdb059d77f397842d846684563d676ea1e49a15e661b24279654b829349dc6e6d9ab57ebf9b57ecc792845b383f5d1f5cfb468d357c013637f19c2bb4f7","ssdeep":"96:2E2eajnAeey+LeajnAeey+0eajnAeey+4eajnAeey+yCzYccyMtSo:2E2dnAfyMdnAfyjdnAfyFdnAfytOYcVY","tlshash":"fab10aaac91367497a2a5b11a9b38d55f0bb12930d3d25e5133cf883803c031ce09fde","first_seen":"2025-11-23T10:44:25.813842Z","last_seen":"2025-11-23T10:44:25.813842Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/css/style.css","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sqjzP6RvU01KDLPq; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 15 Nov 2025 00:04:07 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"f95-18f97589265\"\r\ncontent-encoding: gzip\r\nage: 729586\r\ncontent-length: 1302\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3989,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3950)","md5":"adc412d73db0e6193d9016af9cd8bc8a","sha1":"1a528950c1d45b24649f237cf89a7ce1040b27f0","sha256":"a6bc3a7fdda8f18696bfd90dd1d10d601ea1e192abc1c59c39123007a3ce5b8c","sha512":"386eba78496afcf7b3eb259c3be01138b0058dc7b8326137f528923c1a374b1b279873472e222d9ecc2d425e09701d146b443b8466be120890b4e56bc4f107b8","ssdeep":"","tlshash":"8e816099c6ac78cb39c7cc2e0080fb4263060195e87a6b79b53b75b486462857323f27","first_seen":"2024-08-20T11:33:05.83439Z","last_seen":"2025-11-23T10:44:25.815582Z","times_seen":3,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/solid.gif?z=2021514\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=wpbIgB0aHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=1522973482342400\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1253\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:50 GMT","end":"Wed, 21 Jan 2026 14:23:49 GMT"},"fingerprint":{"sha1":"E9:28:A4:8C:0F:4E:25:88:BF:F6:CA:48:D5:03:97:AD:CC:50:A9:29","sha256":"B3:49:9E:D1:5F:3D:B4:77:B7:0B:91:37:97:BA:D2:DE:6A:BC:F7:7A:4D:70:AB:EE:F6:3C:DC:55:0D:18:7D:0F"}}},"request":{"raw":"POST /solid.gif?z=2021514\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=wpbIgB0aHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=1522973482342400\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1253\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\nUID=2511230543abc717b61e4b4b60902c1ca8e2; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-07-11T12:40:06.330165Z","times_seen":22571,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bb2cdd9a0b.6efc66c9e7.com/in/show/?tag_ab=d\u0026site_id=31823316\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=tz_offset,all,dch_ip\u0026ssp=3964\u0026page=https%3A%2F%2Fcyberdrop.cr%2Fa%2Fqehx2x2L\u0026refdom=cyberdrop.cr\u0026auction_time=1763894635\u0026subid=1244929212\u0026sid=527480306\u0026tcid=0\u0026ver=8.243.4\u0026ver_c=\u0026spot_id=823316\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-11-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=98.4172884423365\u0026kubik_score=99.684\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1244929212%26spot_id%3D823316%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fcyberdrop.cr%252Fa%252Fqehx2x2L%26idzone%3D0%26sid%3D1886\u0026is_cpm=1\u0026resp_type=\u0026crid=0369242\u0026crtid=710bbf27ea376c9e820e867908c69deb\u0026url=https%3A%2F%2Ftrack-eu.trackingtraffo.com%2Fnative%2Fc%3Fauth%3De28u5p6%5C%26price%3D1.9%5C%26c%3DCogtPRxCFGpjuf5cpMpoYjiHRib06T79XpTPEh2NE2fe_foEuUlN24eL0lWpSieEQLWyst61h4gAxJmQQBYqCEMyeO2lGvBKtrPjFnJqzXU0w5wl1EmfR0yeUJtnxYQYXMTiBEMw5gTWWSbvRUATnLe0wkf4mbMsKoD36gQ3Y8Ia_4Pz4_XcnVDBCvCFnWllXkM9auS5GSCEsj-ouzgUgK5XrqeLUzqWqhxh144wJKXfkAur2lNBlc60SG9dpbkXS8cIfFJckTTxEVHATVoVq0ahFOp3PDdH1imhF_MBz8gStoNLaqCnaKn-JVG4fu168N7buctMeT7BBz10Rg3JeuMulO-mXjLaIaF3o-sI9n92dzA3T2zqssgxdhYHr_djVuczw4JVXcXkNW6nSAM2ifr4oWtRzQQm8RCQNvTkEQpu3jq0LGB8zDh13U2J3T9k4jrXj0cvqDnYIBZlVpwNrDWgzymcWDmHRiUEa1y1saMiPE-CEn7yrf9G6oA\u0026icons=bUvWBWbiH5gxjkiiHbbcMES173-wqHJ07y7tFS8cqEsONrh9bbx3LheMSDJGd0RzJI7mmh3slY3Q970y9lDgGk0A-u0tfzkB7OMkuj_4murHqWEYmj5A-pTwlYQtJW4m5GZGnu_l1GrL-9X2Om2OoRFwA0IBvGtMVon6oUoul1d2z5eVynuOwZhnnOS-WctWIltc9i0MMXoILckQF4VV0gbzKQs_Sr3StWclvW7fFMz9yvaT_6S6VZ5yi4hYUvSRG5RC8U868oU92UKyOKLfOtUExgcN5hKRmMYoXvNqM9j_vl2Dct22KSHmR6bB6aob8rEdDtRC1Y8G3e5yXNJTaSjTF-YiJzDwNg9BsmSDpfhi3Fh0H7yZiVw_64_wWAUPe5HTlA56LlPQVaNf8bOo_qElV4POskQITGjvlAqNCgpaE2Pk6_0cPc5oI3rcNoZ5RKvslxXcN9_LyAwJ1MaN5cT40Bpk2i04yvgdSQWb0w1gAHET2csChGpd9Iv8lt0quVY13KyDbXkyA5B_-mUsVxLbdKaAHvNZ47w0OmH-OYKuVnCRWhXE-8G5-1Yf\u0026ext_cid=0\u0026px_id=75823316\u0026min_cpm=0.00024453242773250257\u0026out_id=0\u0026campaign_type=shq\u0026aid=3335\u0026cid=18338\u0026uniq=aec9fb1b638162a6c060765db8fcde49423c9e410e0dcb6872ce1414603e81b3\u0026mid=649480437613308742\u0026skin_id=2\u0026vertical_id=18\u0026skin_test=0\u0026from_cache=0\u0026ecpm=1.3746500253677358\u0026cpm=1.9\u0026verify_hash=37e7d152cf5a227d779525f550dc8585\u0026verify_hash_v2=cc63c672ea92d96ee14e4e35e07e78a525f91434bc1a44395d6787ada0a7a8dc\u0026is_native=1\u0026real_bid=1.3746500253677358\u0026original_bid_usd=1.9\u0026original_bid=1.9\u0026show_type=0\u0026exp=180\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=69,90,18,70,4\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,coef_095\u0026show_count=1\u0026expiration_timestamp=1764067435\u0026image_url=https%3A%2F%2Fads.trackingtraffo.com%2Fcreatives%2Fk1qy286gxmd5g3dpr397nw5v%2F1697196454419-oHscg32D2lDl.jpg\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-10-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=torrents,hosting\u0026pop_cpc=0.0019\u0026ext_campaign_id_str=4319\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Torrents%2CHosting\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.00028789520324531135\u0026social_network=\u0026publisher_id=8654\u0026advanced_pub_id=758654\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026cpa=0324af35-ac52-4e27-ade7-848642549c23\u0026prev_step_diff=844\u0026st=0.03","fqdn":"bb2cdd9a0b.6efc66c9e7.com","domain":"6efc66c9e7.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6efc66c9e7.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 14:04:16 GMT","end":"Tue, 17 Feb 2026 14:04:15 GMT"},"fingerprint":{"sha1":"A8:EF:ED:74:D9:33:5C:F2:51:C3:F4:B2:17:DF:D9:D9:AD:9B:FE:86","sha256":"1C:2F:56:DB:0D:4D:02:CC:44:7D:44:8A:6D:4D:10:FA:C0:90:0A:F6:BB:3E:90:1D:31:EF:BE:50:18:16:62:33"}}},"request":{"raw":"GET /in/show/?tag_ab=d\u0026site_id=31823316\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=tz_offset,all,dch_ip\u0026ssp=3964\u0026page=https%3A%2F%2Fcyberdrop.cr%2Fa%2Fqehx2x2L\u0026refdom=cyberdrop.cr\u0026auction_time=1763894635\u0026subid=1244929212\u0026sid=527480306\u0026tcid=0\u0026ver=8.243.4\u0026ver_c=\u0026spot_id=823316\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-11-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=98.4172884423365\u0026kubik_score=99.684\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1244929212%26spot_id%3D823316%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fcyberdrop.cr%252Fa%252Fqehx2x2L%26idzone%3D0%26sid%3D1886\u0026is_cpm=1\u0026resp_type=\u0026crid=0369242\u0026crtid=710bbf27ea376c9e820e867908c69deb\u0026url=https%3A%2F%2Ftrack-eu.trackingtraffo.com%2Fnative%2Fc%3Fauth%3De28u5p6%5C%26price%3D1.9%5C%26c%3DCogtPRxCFGpjuf5cpMpoYjiHRib06T79XpTPEh2NE2fe_foEuUlN24eL0lWpSieEQLWyst61h4gAxJmQQBYqCEMyeO2lGvBKtrPjFnJqzXU0w5wl1EmfR0yeUJtnxYQYXMTiBEMw5gTWWSbvRUATnLe0wkf4mbMsKoD36gQ3Y8Ia_4Pz4_XcnVDBCvCFnWllXkM9auS5GSCEsj-ouzgUgK5XrqeLUzqWqhxh144wJKXfkAur2lNBlc60SG9dpbkXS8cIfFJckTTxEVHATVoVq0ahFOp3PDdH1imhF_MBz8gStoNLaqCnaKn-JVG4fu168N7buctMeT7BBz10Rg3JeuMulO-mXjLaIaF3o-sI9n92dzA3T2zqssgxdhYHr_djVuczw4JVXcXkNW6nSAM2ifr4oWtRzQQm8RCQNvTkEQpu3jq0LGB8zDh13U2J3T9k4jrXj0cvqDnYIBZlVpwNrDWgzymcWDmHRiUEa1y1saMiPE-CEn7yrf9G6oA\u0026icons=bUvWBWbiH5gxjkiiHbbcMES173-wqHJ07y7tFS8cqEsONrh9bbx3LheMSDJGd0RzJI7mmh3slY3Q970y9lDgGk0A-u0tfzkB7OMkuj_4murHqWEYmj5A-pTwlYQtJW4m5GZGnu_l1GrL-9X2Om2OoRFwA0IBvGtMVon6oUoul1d2z5eVynuOwZhnnOS-WctWIltc9i0MMXoILckQF4VV0gbzKQs_Sr3StWclvW7fFMz9yvaT_6S6VZ5yi4hYUvSRG5RC8U868oU92UKyOKLfOtUExgcN5hKRmMYoXvNqM9j_vl2Dct22KSHmR6bB6aob8rEdDtRC1Y8G3e5yXNJTaSjTF-YiJzDwNg9BsmSDpfhi3Fh0H7yZiVw_64_wWAUPe5HTlA56LlPQVaNf8bOo_qElV4POskQITGjvlAqNCgpaE2Pk6_0cPc5oI3rcNoZ5RKvslxXcN9_LyAwJ1MaN5cT40Bpk2i04yvgdSQWb0w1gAHET2csChGpd9Iv8lt0quVY13KyDbXkyA5B_-mUsVxLbdKaAHvNZ47w0OmH-OYKuVnCRWhXE-8G5-1Yf\u0026ext_cid=0\u0026px_id=75823316\u0026min_cpm=0.00024453242773250257\u0026out_id=0\u0026campaign_type=shq\u0026aid=3335\u0026cid=18338\u0026uniq=aec9fb1b638162a6c060765db8fcde49423c9e410e0dcb6872ce1414603e81b3\u0026mid=649480437613308742\u0026skin_id=2\u0026vertical_id=18\u0026skin_test=0\u0026from_cache=0\u0026ecpm=1.3746500253677358\u0026cpm=1.9\u0026verify_hash=37e7d152cf5a227d779525f550dc8585\u0026verify_hash_v2=cc63c672ea92d96ee14e4e35e07e78a525f91434bc1a44395d6787ada0a7a8dc\u0026is_native=1\u0026real_bid=1.3746500253677358\u0026original_bid_usd=1.9\u0026original_bid=1.9\u0026show_type=0\u0026exp=180\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=69,90,18,70,4\u0026need_redirect_show=0\u0026applied_features=main-skins-settings,coef_095\u0026show_count=1\u0026expiration_timestamp=1764067435\u0026image_url=https%3A%2F%2Fads.trackingtraffo.com%2Fcreatives%2Fk1qy286gxmd5g3dpr397nw5v%2F1697196454419-oHscg32D2lDl.jpg\u0026site=native-push-adult\u0026price=0\u0026hostname=auc-inpage-hz-10-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=torrents,hosting\u0026pop_cpc=0.0019\u0026ext_campaign_id_str=4319\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Torrents%2CHosting\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.00028789520324531135\u0026social_network=\u0026publisher_id=8654\u0026advanced_pub_id=758654\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026cpa=0324af35-ac52-4e27-ade7-848642549c23\u0026prev_step_diff=844\u0026st=0.03 HTTP/1.1\r\nHost: bb2cdd9a0b.6efc66c9e7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"bb2cdd9a0b.6efc66c9e7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track-eu.trackingtraffo.com/native/imp?auth=e28u5p6\\\u0026price=1.9\\\u0026c=2R_5uilsUTKHp0kzDzW88ziaaX61CYIPUAYuWMCncL-thAEz2RNyZsrrH9Bo7gPhStsjmm5Xtj-BXKEZVMMbL4XAieM43eOpa1pzRd4j90uaA1OoCNO5n97_wD8MPeU8aKhW9JRlFBKzrUWurgJh68ffL-uXPqXd8hS1EiuGTF2N10wMEnVfSr5iJd09fNlq0vzxfLtq75d7sQitngEJZO5UR2JTKfuG0pz-mxjGc_gjAi5FGqg1lPm3-bFSGUKleUIumxBcLkhrsxAXGFg-ynT83tM8-lwS8knEMmEroOQNYOXg10B1d0pWTAo","fqdn":"track-eu.trackingtraffo.com","domain":"trackingtraffo.com","tld":"com"},"ip":{"addr":"162.55.236.100","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"trackingtraffo.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:40:E4:60:03:38:F6:DD:95:11:44:54:AB:91:B5:49:B8:BC:07:74","sha256":"3C:C7:47:F2:3D:06:F2:AE:3A:30:27:A0:60:4F:0F:95:AD:31:50:9D:9B:94:67:A9:87:5E:65:A0:4D:F2:BE:C7"}}},"request":{"raw":"GET /native/imp?auth=e28u5p6\\\u0026price=1.9\\\u0026c=2R_5uilsUTKHp0kzDzW88ziaaX61CYIPUAYuWMCncL-thAEz2RNyZsrrH9Bo7gPhStsjmm5Xtj-BXKEZVMMbL4XAieM43eOpa1pzRd4j90uaA1OoCNO5n97_wD8MPeU8aKhW9JRlFBKzrUWurgJh68ffL-uXPqXd8hS1EiuGTF2N10wMEnVfSr5iJd09fNlq0vzxfLtq75d7sQitngEJZO5UR2JTKfuG0pz-mxjGc_gjAi5FGqg1lPm3-bFSGUKleUIumxBcLkhrsxAXGFg-ynT83tM8-lwS8knEMmEroOQNYOXg10B1d0pWTAo HTTP/1.1\r\nHost: track-eu.trackingtraffo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 10:43:56 GMT\r\nContent-Type: image/png\r\nContent-Length: 70\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"b357a19c87624c7c4d131aeeb4ae677f","sha1":"c7a9c45fd419815a5ab1998503a9f03514c0e229","sha256":"497790947d4666760ce38f3c00e852c71fdb66cae849bae8e9ede352719e1581","sha512":"794ee916028e48775103a2f1974a7d7d92089f45dffa86c5c342afa073fa41d4a589340ad126789854a7c8e9ac19a5cc7955ebf80fd349f17959a3277f3b6069","ssdeep":"","tlshash":"81a022e32ba0bc3cca30203300088b30ca3020a000220e8e000e803e3c022e000882a3","first_seen":"2023-04-11T22:59:57Z","last_seen":"2026-07-10T00:16:57.806933Z","times_seen":3143,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":148,"dns":51,"connect":24,"send":0,"wait":25,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/libs/creativebulma/bulma-badge@1.0.1.min.css","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /libs/creativebulma/bulma-badge@1.0.1.min.css HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xqPy3PcQ7kpxBiCb; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 09 Nov 2025 18:37:28 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"dcd-18f9758920d\"\r\ncontent-encoding: gzip\r\nage: 1181185\r\ncontent-length: 818\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3533,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3413)","md5":"f458ebf3f983f72e00514823c098a17d","sha1":"1b3e26bda3c92d0173655ded842880b8cc54fed7","sha256":"d00279fa82dbdd0fa4a299e6b71512b9d9530d6d644708aca8900fabfce51a7e","sha512":"83ca2c04393f22bbd948ad7d43e69842dfc1aa324ee5ad99fba74ce81bc13c2cfc7500a9e11dc013df38b4f430c75b393359edde3d43313d6b9774d104ccaac1","ssdeep":"","tlshash":"fc713a22e9e75c0b7357a9aeccd0fb50935b46e6c5280b3ef5063898f944da8210bf07","first_seen":"2023-04-13T01:12:38Z","last_seen":"2026-03-05T16:26:49.303681Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.capndr.com/advertising.js","fqdn":"js.capndr.com","domain":"capndr.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.capndr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 02:32:03 GMT","end":"Sun, 11 Jan 2026 02:32:02 GMT"},"fingerprint":{"sha1":"4F:91:E2:5E:A1:B1:4D:7F:49:01:1E:73:C6:07:EB:0A:BE:44:4C:44","sha256":"7B:0D:8E:03:0E:6E:23:65:30:3D:E8:FC:0C:E7:66:46:E2:5B:7F:FA:FD:D2:FF:61:4C:A4:18:08:24:70:51:6B"}}},"request":{"raw":"GET /advertising.js HTTP/1.1\r\nHost: js.capndr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\nserver: nginx/1.18.0\r\nlast-modified: Fri, 14 Jul 2023 08:23:25 GMT\r\netag: \"64b105fd-0\"\r\nexpires: Sun, 23 Nov 2025 10:48:54 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":71,"dns":14,"connect":21,"send":0,"wait":21,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.capndr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/jserror?type=banner_static\u0026bavar=0\u0026build=1.0.637\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fcyberdrop.cr%2Fa%2Fqehx2x2L","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /jserror?type=banner_static\u0026bavar=0\u0026build=1.0.637\u0026zoneid=\u0026e=Error\u0026m=BCLC\u0026ab=0\u0026trid=\u0026url=https%3A%2F%2Fcyberdrop.cr%2Fa%2Fqehx2x2L HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2511230543fab9a925d6874956b14981ff60\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.wpadmngr.com/static/adManager.js","fqdn":"js.wpadmngr.com","domain":"wpadmngr.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpadmngr.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 03:32:41 GMT","end":"Fri, 30 Jan 2026 03:32:40 GMT"},"fingerprint":{"sha1":"E3:9D:D3:89:FB:90:7B:AA:8C:19:20:0E:65:8F:8A:B8:25:1C:19:1C","sha256":"DA:2F:33:FE:DB:D4:DD:3C:4D:80:E7:DE:2D:70:4B:D7:61:B4:0C:64:DA:A2:78:BB:8F:0B:66:29:AA:A3:2F:37"}}},"request":{"raw":"GET /static/adManager.js HTTP/1.1\r\nHost: js.wpadmngr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 06 Nov 2025 14:16:07 GMT\r\netag: W/\"690cada7-23bd9\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 23 Nov 2025 10:48:53 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1747\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146393,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b2f0972afc8bc1fe3b080eb543a86b47","sha1":"ab71ef7d872e2a44f4aef851853fdf259f2fd746","sha256":"8c001a2bddac6af4af1e5aedba188d8fd9fd355208562fea36994d1418aadc68","sha512":"449884607fa6eb4ce120b484a0f3da066fa83bdc5f3bc14eb656d96606b9b47733d67876887b9218582b71d6b7445d8e55eab7adec3fc2463f2d6cce97eb22bf","ssdeep":"1536:ZaN12toXV0jtQyFem169zKKpKf7xbAQ9c+ts4aAUOPEH9ZoxlB5RnWM8k8MdnCjH:5Pemo9GqK9coDts0KnoxlTA7+da","tlshash":"78e34acdb2d2b07407e75059d83f1207b73a1a16b80c9058f6a6e9c17878dda9237f7a","first_seen":"2025-11-06T14:45:06.101541Z","last_seen":"2025-11-27T11:34:20.174539Z","times_seen":466,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":60,"dns":25,"connect":21,"send":0,"wait":41,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.wpadmngr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/favicon-32x32.png","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=PPAzZHl4K79IgdeV; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 06 Nov 2025 23:27:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1410\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"582-18f97589171\"\r\nage: 1422984\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"20dd9805b85b2eac2fc5a702445c7ce9","sha1":"18abcb0ffc27962237f0863a7f7af402e4a32d6f","sha256":"a7c5a005363644328811415949374b71b908828942482243344101032237a864","sha512":"ff457cf214c1ba012c469cf828f2d89f5aebb5dd1f9a872d8d224a4443eca0fd8f9a183e0bb864b3634ff667f02e68477d57acdfff0cbb1023625e9d5651f390","ssdeep":"","tlshash":"6a21b9ab572f5521b73673bf11a58e21b8b28011d577481cf114a7e1e72a842f2d4297","first_seen":"2023-05-09T09:48:31Z","last_seen":"2026-07-11T01:49:34.058705Z","times_seen":41,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/apple-touch-icon.png","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=xuvrWmiLvw7FaAUc; __ddg10_=1763894634; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3MpgsQNosWRYdB8i; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\n__ddg10_=1763894634; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 06 Nov 2025 23:47:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 24734\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"609e-18f97589171\"\r\nage: 1421756\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":24734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"444dd7d0f557f3b012e58cefb06b0e3a","sha1":"69e7858d9764d112616a6bdc86c1bbcba23d4617","sha256":"ee3d06639caaa7a2dd1330e29898b309e443a29c97c91a2b118f88c3bec2f5b6","sha512":"2c0d1bbed2614a411c4960be2d3eef5249b8f34a0f300ba5147a1f3d99418a48e8cd2d5e8ff6dab70d29bcc2f2965e34473fa873768f324c4165008bec556c29","ssdeep":"768:OE6lwi9fHgxD2MMRWt/cbddiqAKip0UTg4535:p6lwitgh2MMApOddxAKmp35","tlshash":"94b2e069966d0c1aa86378c332c2f1458c8bf6ae811006751d9ee3c237d8cfdb566b5b","first_seen":"2023-05-09T09:48:31Z","last_seen":"2026-07-11T01:49:34.059467Z","times_seen":57,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bb2cdd9a0b.6efc66c9e7.com/in/multy","fqdn":"bb2cdd9a0b.6efc66c9e7.com","domain":"6efc66c9e7.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6efc66c9e7.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 14:04:16 GMT","end":"Tue, 17 Feb 2026 14:04:15 GMT"},"fingerprint":{"sha1":"A8:EF:ED:74:D9:33:5C:F2:51:C3:F4:B2:17:DF:D9:D9:AD:9B:FE:86","sha256":"1C:2F:56:DB:0D:4D:02:CC:44:7D:44:8A:6D:4D:10:FA:C0:90:0A:F6:BB:3E:90:1D:31:EF:BE:50:18:16:62:33"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: bb2cdd9a0b.6efc66c9e7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":131,"dns":58,"connect":27,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"bb2cdd9a0b.6efc66c9e7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-2009817160%3A1763894635524192\u0026hl=en\u0026ifkv=ARESoU3nMzvgFwacTX-3ndt5-0wqaFXK2NgSsU6lR8y5YMs-u5eYJTfPslTfYKghbrJKEb8ll68iOQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:52 GMT","end":"Mon, 19 Jan 2026 08:35:51 GMT"},"fingerprint":{"sha1":"95:94:D2:A2:42:3D:9B:2F:BB:65:03:35:EA:85:1D:B6:C0:BB:E5:07","sha256":"53:9A:55:C8:25:B4:4A:38:C0:A9:FD:A8:38:B3:FD:CA:8E:7E:1F:2A:79:A9:52:76:8C:00:7C:7B:96:1E:45:33"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-2009817160%3A1763894635524192\u0026hl=en\u0026ifkv=ARESoU3nMzvgFwacTX-3ndt5-0wqaFXK2NgSsU6lR8y5YMs-u5eYJTfPslTfYKghbrJKEb8ll68iOQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-DbQU1AxIxPBpbflE51zIgg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.KEYUHSehrM0.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bb2cdd9a0b.6efc66c9e7.com/in/show/?tag_ab=d\u0026site_id=31823316\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=tz_offset,all,dch_ip\u0026ssp=3964\u0026page=https%3A%2F%2Fcyberdrop.cr%2Fa%2Fqehx2x2L\u0026refdom=cyberdrop.cr\u0026auction_time=1763894635\u0026subid=1244929212\u0026sid=527480306\u0026tcid=0\u0026ver=8.243.4\u0026ver_c=\u0026spot_id=823316\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-11-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=98.4172884423365\u0026kubik_score=99.684\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1244929212%26spot_id%3D823316%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fcyberdrop.cr%252Fa%252Fqehx2x2L%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=popunderAd\u0026crid=91387_120302012\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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-%26bs%3DTVRjMk16ZzVORFl6Tlh3eE16QmtZVEkwTTJFek9EUTJPREppTURVelpXTXlNMk0zWVdVeE1XSmpaQS0tfDR8MC4xfDgyfDgyfDB8T0t8ODUxMjE1ZmE2YjY5Njk1MTQ2ZjZmNjYyNzY4MmQzMDg-%26cb%3De2e_6922e56b532bd8.42076240\u0026icons=j6y-dXEP2FBokeRU9nljixsXCbMsqhb_dg4dPF_1bTevJ48ho511tzmq7r4G0hFLC_SCFP_Mjet0CE9NE5l-gUUlh1DBFYCh3OAhMzlAOU1wfdhgAl8c5Z4HRpvLlsWlX_CmacWQoQ-lqcR2VuIwBE2CW_Gp3GnZ0Mn39n_X6Kk0Qe_vlw\u0026ext_cid=7754042\u0026px_id=122244634\u0026min_cpm=0.03338277110320182\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=2140\u0026cid=19219\u0026uniq=\u0026mid=649480437613308742\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.022394471535487015\u0026cpm=0.0075657679500114716\u0026verify_hash=d9ba9cf984b6460e580ac07fbac86f0c\u0026verify_hash_v2=f3ce724076aed338b52a5aada6fad9d9e1434cc3206ce26fa4a115ecd6f4be03\u0026is_native=2\u0026real_bid=0.0005697974015999999\u0026original_bid_usd=0.0005697974015999999\u0026original_bid=0.0004946158\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,89,20,27,150,108,0\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.0005697974015999999\u0026hostname=auc-inpage-hz-10-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=torrents,hosting\u0026pop_cpc=0.0005697974015999999\u0026ext_campaign_id_str=7754042\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Torrents%2CHosting\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.013277996580480497\u0026social_network=\u0026publisher_id=8654\u0026advanced_pub_id=1010804\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=b3995ebe-09e4-438e-89cf-c72e760e24a3\u0026prev_step_diff=843\u0026st=0.03","fqdn":"bb2cdd9a0b.6efc66c9e7.com","domain":"6efc66c9e7.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6efc66c9e7.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 14:04:16 GMT","end":"Tue, 17 Feb 2026 14:04:15 GMT"},"fingerprint":{"sha1":"A8:EF:ED:74:D9:33:5C:F2:51:C3:F4:B2:17:DF:D9:D9:AD:9B:FE:86","sha256":"1C:2F:56:DB:0D:4D:02:CC:44:7D:44:8A:6D:4D:10:FA:C0:90:0A:F6:BB:3E:90:1D:31:EF:BE:50:18:16:62:33"}}},"request":{"raw":"GET /in/show/?tag_ab=d\u0026site_id=31823316\u0026adblock=0\u0026testab=0\u0026auction_host=apply\u0026mm=0\u0026yc=0\u0026render_type=shq\u0026pr=\u0026user_keywords=\u0026device_theme=light\u0026v2_track=0\u0026v2=0\u0026conditions=tz_offset,all,dch_ip\u0026ssp=3964\u0026page=https%3A%2F%2Fcyberdrop.cr%2Fa%2Fqehx2x2L\u0026refdom=cyberdrop.cr\u0026auction_time=1763894635\u0026subid=1244929212\u0026sid=527480306\u0026tcid=0\u0026ver=8.243.4\u0026ver_c=\u0026spot_id=823316\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026created_at=2025-11-23\u0026iabcat=IAB25-3\u0026user_fp=3062215412326782139\u0026score=98.4172884423365\u0026kubik_score=99.684\u0026kaminari_bot_ip=1\u0026durl=https%3A%2F%2Fkts.dasdaily.com%2Fin%2F1546%2F%3Fad_sub%3D1244929212%26spot_id%3D823316%26is_adult%3D1%26p%3Dhttps%253A%252F%252Fcyberdrop.cr%252Fa%252Fqehx2x2L%26idzone%3D0%26sid%3D1886\u0026is_cpm=0\u0026resp_type=popunderAd\u0026crid=91387_120302012\u0026crtid=b0681ff5c1739e7f8bdbb8527f77d810\u0026url=https%3A%2F%2Fs.optvz.com%2Fcimp.php%3Fdata%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-%26bs%3DTVRjMk16ZzVORFl6Tlh3eE16QmtZVEkwTTJFek9EUTJPREppTURVelpXTXlNMk0zWVdVeE1XSmpaQS0tfDR8MC4xfDgyfDgyfDB8T0t8ODUxMjE1ZmE2YjY5Njk1MTQ2ZjZmNjYyNzY4MmQzMDg-%26cb%3De2e_6922e56b532bd8.42076240\u0026icons=j6y-dXEP2FBokeRU9nljixsXCbMsqhb_dg4dPF_1bTevJ48ho511tzmq7r4G0hFLC_SCFP_Mjet0CE9NE5l-gUUlh1DBFYCh3OAhMzlAOU1wfdhgAl8c5Z4HRpvLlsWlX_CmacWQoQ-lqcR2VuIwBE2CW_Gp3GnZ0Mn39n_X6Kk0Qe_vlw\u0026ext_cid=7754042\u0026px_id=122244634\u0026min_cpm=0.03338277110320182\u0026out_id=1\u0026campaign_type=lq-pop\u0026aid=2140\u0026cid=19219\u0026uniq=\u0026mid=649480437613308742\u0026skin_id=2\u0026vertical_id=0\u0026skin_test=0\u0026from_cache=0\u0026ecpm=0.022394471535487015\u0026cpm=0.0075657679500114716\u0026verify_hash=d9ba9cf984b6460e580ac07fbac86f0c\u0026verify_hash_v2=f3ce724076aed338b52a5aada6fad9d9e1434cc3206ce26fa4a115ecd6f4be03\u0026is_native=2\u0026real_bid=0.0005697974015999999\u0026original_bid_usd=0.0005697974015999999\u0026original_bid=0.0004946158\u0026show_type=0\u0026exp=0\u0026placement_type_id=0\u0026ua_mismatch=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0\u0026ip_mismatch=91.90.42.154\u0026geo=NO\u0026carrier=-\u0026label_ids=4,89,20,27,150,108,0\u0026need_redirect_show=0\u0026applied_features=coef_095,main-skins-settings\u0026show_count=1\u0026expiration_timestamp=0\u0026image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FSG%2FSG_083be47dfc3e28c9a68305b76181a5033bc45790.webp\u0026site=native-push-adult\u0026price=0.0005697974015999999\u0026hostname=auc-inpage-hz-10-a\u0026auc_type=1\u0026pop_type=1\u0026site_id64=\u0026interest_vertical_ids=\u0026mo=\u0026ve=\u0026timezone_olson=UTC\u0026topics=\u0026historical_keywords=torrents,hosting\u0026pop_cpc=0.0005697974015999999\u0026ext_campaign_id_str=7754042\u0026is_webview=0\u0026client_price=0\u0026direct_client_price=0\u0026priority=0\u0026client_payment_model=\u0026is_in_app=0\u0026auc_domain_type=hash\u0026script_type=general\u0026tma_wallet_balance=0\u0026processed_keywords=Torrents%2CHosting\u0026is_iframe=0\u0026traffic_category=adult\u0026iframe_click=0\u0026estimated_ctr=0.013277996580480497\u0026social_network=\u0026publisher_id=8654\u0026advanced_pub_id=1010804\u0026user_click_counter=1\u0026lv_id=0\u0026service_spot_id=0\u0026mediation_ecpm=0\u0026mediation_type=no_mediation\u0026entry_source=direct\u0026is_second_price=0\u0026payment_model=cpm\u0026final_source_id=0\u0026pattern1=0\u0026pattern2=0\u0026pattern3=0\u0026pattern4=0\u0026pattern5=0\u0026format=default-view-b_r-body\u0026mlf=1\u0026mlc=1\u0026cpa=b3995ebe-09e4-438e-89cf-c72e760e24a3\u0026prev_step_diff=843\u0026st=0.03 HTTP/1.1\r\nHost: bb2cdd9a0b.6efc66c9e7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"bb2cdd9a0b.6efc66c9e7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d50a192c.b-cdn.net/js/script.js","fqdn":"d50a192c.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: d50a192c.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3573780\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 502\r\ncdn-cachedat: 11/23/2025 10:43:54\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8820c0f53a7d545c6ba0d4633fbd26af\r\ncdn-cache: MISS\r\ncdn-status: 502\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/images/logo_footer.gif","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /images/logo_footer.gif HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=X9HuqABGMPMYgBrn; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xuvrWmiLvw7FaAUc; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\n__ddg10_=1763894634; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:54 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 06 Nov 2025 23:29:25 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35621\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"8b25-18f975891e5\"\r\nage: 1422869\r\nddg-cache-status: HIT,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":35621,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 50 x 48","md5":"f43c48e92afb7cb6ef12f3bbbfd41748","sha1":"d9be19fbc18e6ec01ea27c81133f73e11bccc234","sha256":"b717b292ac78a46d6d26a50611ea4bddd81904f17b8570a60541febe62573d93","sha512":"161214ce50e0ca393fc49b02d6383148f65a8f89aa30789d8197ce41162b7943918a7c228f66e8584a26eca8e4bc6024701cc75b105ced8ff169a3ab66c121d8","ssdeep":"768:xzAhKz3XgpmHQqRZp0Y1VvCt6+XM84s6LAc4vF:xzAYznHwqRz0Y1VvCtb4s2A1vF","tlshash":"18f27db6b3d24d3cfd1bb8f9d04e4afd742d8a64388541392cf9c6a06d5a44a201dbe7","first_seen":"2023-12-27T22:22:14Z","last_seen":"2026-02-17T21:06:06.376055Z","times_seen":20,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caqbmyavw.com/fabomjv/hic?9LAl=NDw\u0026cj=4\u0026ua=hf\u0026sfuf=rnpes\u0026oj=403063\u0026fnl=2\u0026xcersn=690136\u0026yx=3852193\u0026blcv=jxhw\u0026io=_jblkrqlajrpojhrywxuskp","fqdn":"caqbmyavw.com","domain":"caqbmyavw.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"caqbmyavw.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 15:18:45 GMT","end":"Thu, 01 Jan 2026 15:18:44 GMT"},"fingerprint":{"sha1":"F5:84:C8:54:7A:EE:E3:C1:AD:FE:1F:1A:0C:C5:5A:35:EC:CE:61:EC","sha256":"2D:7D:78:8E:32:6C:69:A8:E4:18:53:A1:2F:13:C5:38:91:22:2D:59:B4:8D:1F:92:DE:98:04:50:AD:41:D0:B3"}}},"request":{"raw":"GET /fabomjv/hic?9LAl=NDw\u0026cj=4\u0026ua=hf\u0026sfuf=rnpes\u0026oj=403063\u0026fnl=2\u0026xcersn=690136\u0026yx=3852193\u0026blcv=jxhw\u0026io=_jblkrqlajrpojhrywxuskp HTTP/1.1\r\nHost: caqbmyavw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nUID=251123054312aa20fdde5c4eefb18e32c6d3; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2152,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2152), with no line terminators","md5":"a3f6ab29dfac39e3317757f9e42f73f6","sha1":"2927d83ad373134d7fa977c691fffef42d44cf36","sha256":"9c4e4957dc93046f0246cf5b8fa09a200b6e1f486ebd45d7ecbcc528db1214ff","sha512":"ebf64b439d98bfead3c713dce1790f6c3315ba3f7a1cf48f59e18be841b35e30bebf15c8765285e0a14f95cc42de986c4d42c86d62b3c80858fd52400a971164","ssdeep":"","tlshash":"e541bdbfdcb484a2ed5c0f6a15fe7c866c7e0a93082b52061f70e51453a977067730d1","first_seen":"2025-11-23T10:44:25.82129Z","last_seen":"2025-11-23T10:44:25.82129Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":43,"dns":1,"connect":17,"send":0,"wait":20,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/css/album.css","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /css/album.css HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DqLNpng1oqfryCY9; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Nov 2025 08:19:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"189-18f97589265\"\r\ncontent-encoding: br\r\nage: 181483\r\ncontent-length: 226\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":393,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (354)","md5":"86af70c16011a9e7a5280125797e5cc9","sha1":"f7b7f30e93903f093406972f8fbd40537466ee63","sha256":"8214bbe1a8647ccb7226814443e5c70cb991201a60b0a2726bd0bda5f2228fe2","sha512":"1091a94c181e0f88200cc821e532c456a1cde6716f8b281bfdebc55393d721e8e55d64286ce1453aa6a0ba4c0718b3c684eefae7675774df20eabd3feb14a7ea","ssdeep":"","tlshash":"42e06176c9c1db5f212744254115e16041200ec8f27d5b3fb1b930f124942b7363bf07","first_seen":"2025-10-31T05:34:02.091799Z","last_seen":"2025-11-23T10:44:25.822836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"na.nawpush.com/tags/196027?version_name=d\u0026domain=cyberdrop.cr","fqdn":"na.nawpush.com","domain":"nawpush.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"na.nawpush.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 02:32:21 GMT","end":"Mon, 16 Feb 2026 02:32:20 GMT"},"fingerprint":{"sha1":"2B:B2:C7:E4:0C:35:8B:EA:A3:45:09:54:58:1F:96:D4:28:92:9E:24","sha256":"5D:DA:64:89:43:2F:60:A7:F1:43:BE:04:58:13:73:0E:73:99:6E:4B:50:A4:E4:06:23:B2:73:B0:E0:22:86:AF"}}},"request":{"raw":"GET /tags/196027?version_name=d\u0026domain=cyberdrop.cr HTTP/1.1\r\nHost: na.nawpush.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2a2d25efa7daff5f9e0fdb455b4ae548","sha1":"39d4af243ca4bfb12d81be4d6b8a99a4bd7c1081","sha256":"0d6a76c1f40acbdb58d9727e3bf112490807cdb146ab3b669c8b7fdf44c2e8fd","sha512":"2e9f940fdaaa0e5f7d670b426bcd7048939c65807ce35f7b8be66bace95566f41bf8601a1af2ea65f404df949d193f9f967f49abee7edb805fc5446abdeabee2","ssdeep":"","tlshash":"773177749d30c876d0f04642b187734a551c216b7484f55ef4bd88f905eedba0f5615b","first_seen":"2025-10-31T06:53:30.221286Z","last_seen":"2025-12-01T22:40:56.164925Z","times_seen":6,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":78,"dns":26,"connect":19,"send":0,"wait":23,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"na.nawpush.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bb2cdd9a0b.6efc66c9e7.com/in/multy","fqdn":"bb2cdd9a0b.6efc66c9e7.com","domain":"6efc66c9e7.com","tld":"com"},"ip":{"addr":"168.119.25.102","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"6efc66c9e7.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 14:04:16 GMT","end":"Tue, 17 Feb 2026 14:04:15 GMT"},"fingerprint":{"sha1":"A8:EF:ED:74:D9:33:5C:F2:51:C3:F4:B2:17:DF:D9:D9:AD:9B:FE:86","sha256":"1C:2F:56:DB:0D:4D:02:CC:44:7D:44:8A:6D:4D:10:FA:C0:90:0A:F6:BB:3E:90:1D:31:EF:BE:50:18:16:62:33"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: bb2cdd9a0b.6efc66c9e7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2348\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2348,"data":"{\"imp\":[{\"ext\":{\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"refdomain\":\"\",\"labels\":\"\",\"tcid\":0,\"site\":\"native-push\",\"screen_resolution\":\"1280x1024\",\"ve\":\"\",\"mo\":\"\",\"format\":\"default-view-b_r-body\",\"idzone\":0,\"testab\":0,\"timezone_olson\":\"UTC\",\"blocked_verticals\":\"\",\"after_video\":0,\"tu\":1,\"mm\":0,\"skins\":null,\"st\":0.01,\"spot_id\":823316,\"timezone\":0,\"subid\":\"1244929212\",\"wl\":1,\"event_id\":\"fd796bac-1461-4594-af75-7c4ec4cc6b0f\",\"sid\":527480306,\"created_at\":\"2025-11-23\",\"ver\":\"8.243.4\",\"is_native\":1,\"device_theme\":\"light\",\"ad_tags\":\"Album%2Cpjday%2C%5B15%2Cfiles%2C%3A%2C5.11%2CGB%5D%2CCyberDrop%2Cupload%2CCyberDrop%2Cfile%2Cimages%2Cfree%2Chosting%2Cpack%2Calbum%2Cset%2Cpacks%2Ccollection%2CAlbum%2Cpjday%2C%5B15%2Cfiles%2C%3A%2C5.11%2CGB%5D%2CAlbum%2Cpjday%2C%5B15%2Cfiles%2C%3A%2C5.11%2CGB%5D%2Con%2Ccyberdrop.cr%2C%5BReg%2COPEN%5D%2Cpjday\",\"user_keywords\":\"\",\"v2_track\":0,\"default_keywords\":\"\",\"tag_ab\":\"d\",\"suggestive\":0,\"v2\":0,\"features\":\"\",\"yfriendly_always\":false,\"is_iframe\":false,\"approved_mainstream\":0,\"default\":1},\"pext\":{\"ab\":0},\"metrics\":{\"topics\":[],\"prev_step_diff\":837}}],\"site\":{\"id\":\"823316\",\"cat\":[\"IAB25-3\"],\"page\":\"https%3A//cyberdrop.cr/a/qehx2x2L\",\"is_publisher\":true,\"ct\":0,\"ctid\":1,\"script_type\":\"general\",\"auc_domain_type\":\"hash\"},\"ext\":{\"dt\":1763894635027},\"user\":{\"fp\":0,\"fp_str\":\"\",\"ua_data\":null,\"events\":[],\"interest_ids\":[],\"click_status\":\"unknown\",\"keywords_history\":{\"keywords\":[{\"keyword\":\"Torrents\",\"counter\":1},{\"keyword\":\"Hosting\",\"counter\":1}],\"pages_count\":1},\"is_webview\":false,\"is_inapp\":false,\"telegram\":{\"user_id\":0,\"username\":\"\",\"is_premium\":false,\"color_scheme\":\"\",\"wallet_address\":\"\",\"wallet_balance\":\"\"},\"social_network\":\"\",\"audiences_ids\":[]},\"device\":{\"w\":1280,\"h\":1024},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"cached_mislead_offer\":{\"track_click_url\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 7937\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69057,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5cbcad9b2c861300647ac3596eaaa096","sha1":"0cc43ddfcca805804ed159e3bf428f3c5784010d","sha256":"6144dc103401c8e185eb015ba46db2ec5497e8aceb18db77f37017ad98bf6a4e","sha512":"1af918cebef5663c9cde8f2fd32b499c38c716c38739d7fd9ca9ff55484d2228ae39d9dee89453d7795e843e075d4637a1b08d484652ef6ccd95378d6d84eeac","ssdeep":"768:l3BpjupjbpoZpohpo9nopj7pjYM3I1SZA9MZA/1SZA11SZAl1SZA31AOI1SZAGID:l33nNM3IdH1l3COImID","tlshash":"e3638e6219a7bd512ceec1075015b52872c88a1baf838dffddf58561c16932b22ebdcc","first_seen":"2025-11-23T10:44:25.825155Z","last_seen":"2025-11-23T10:44:25.825155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"bb2cdd9a0b.6efc66c9e7.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/css/thumbs.css","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /css/thumbs.css HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=imhqeCksgRpIjlK9; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 13 Nov 2025 04:03:29 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"2f3-18f97589269\"\r\ncontent-encoding: br\r\nage: 888024\r\ncontent-length: 377\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":755,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (715)","md5":"c7d802553d03ed64be5691bf64677095","sha1":"9f34af8df4eeeed8e88d0c3390d82707cf8ab82e","sha256":"2735076979cd647a976e8822ab652ccec265c0d061b7eebb813191f39e2c674c","sha512":"d5bc8a013ebb270d82d4669e3dcf5152d656d44f1d411f3afd1d29a5e10a25d1a7241ccccdc8f57c65f5b10bf0b53ad2c18d0c17224558aa4d8ed09b30e4a10e","ssdeep":"","tlshash":"5c01b1314e13603ef0765b7db857d5cc6f05d023d59e8b9dba01d56ac0c72a73430686","first_seen":"2024-08-20T11:33:05.838129Z","last_seen":"2025-11-23T10:44:25.827188Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:52 GMT","end":"Mon, 19 Jan 2026 08:35:51 GMT"},"fingerprint":{"sha1":"95:94:D2:A2:42:3D:9B:2F:BB:65:03:35:EA:85:1D:B6:C0:BB:E5:07","sha256":"53:9A:55:C8:25:B4:4A:38:C0:A9:FD:A8:38:B3:FD:CA:8E:7E:1F:2A:79:A9:52:76:8C:00:7C:7B:96:1E:45:33"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:Im728cE42hQPfwRojCYmvgeHS0f-3Q:lvTK9yeXH5UiNywE; Expires=Tue, 23-Nov-2027 10:43:55 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-2009817160:1763894635524192\u0026ifkv=ARESoU3sq03gFvtYwn3RcNqV05OY5vhQtFfHjwEWEb5gLo36gzeBjGaRxn9muogtsKl1mJi2dGtztw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-TFkvZIN49AoSJqF-iH1-og' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncross-origin-resource-policy: cross-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":106,"dns":0,"connect":15,"send":0,"wait":24,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.me/css/fonts/roboto.css","fqdn":"cyberdrop.me","domain":"cyberdrop.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Nov 2025 00:18:26 GMT","end":"Mon, 02 Feb 2026 00:18:25 GMT"},"fingerprint":{"sha1":"3A:D1:51:16:3D:1C:76:51:5E:9D:12:C4:78:1C:7C:68:FF:3E:60:F7","sha256":"B8:DE:C5:20:4E:0E:36:BF:C0:CD:2F:C9:EC:1B:6C:B3:4F:EA:1A:AE:BA:A3:3E:0D:A5:82:E7:7B:1C:76:C1:26"}}},"request":{"raw":"GET /css/fonts/roboto.css HTTP/1.1\r\nHost: cyberdrop.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":344,"dns":132,"connect":104,"send":0,"wait":0,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.me","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avalanchetremorunfilled.com/check.html","fqdn":"avalanchetremorunfilled.com","domain":"avalanchetremorunfilled.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avalanchetremorunfilled.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:24:41 GMT","end":"Wed, 21 Jan 2026 14:24:40 GMT"},"fingerprint":{"sha1":"7C:99:37:1B:56:E3:EA:68:F8:DE:7D:7E:3B:31:C5:E9:3D:37:ED:5F","sha256":"67:D7:FE:FD:05:E9:B9:3E:4F:B9:10:D8:89:BE:6D:FA:B2:8C:D8:7A:F4:F7:51:30:DC:4D:C2:BA:51:A5:10:56"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: avalanchetremorunfilled.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"avalanchetremorunfilled.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/keywords","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 02:00:40 GMT","end":"Sat, 24 Jan 2026 02:00:39 GMT"},"fingerprint":{"sha1":"2B:72:A9:3F:14:00:92:B9:05:AC:BC:3B:22:CB:D9:87:80:23:C8:3D","sha256":"60:5B:BA:7E:5F:7A:B1:E0:55:4D:4C:29:EA:C7:21:68:37:AF:03:5B:A7:3D:15:98:F1:65:96:AB:4A:3E:17:3B"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 368\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":368,"data":"{\"ad_tags\":\"Album%2Cpjday%2C%5B15%2Cfiles%2C%3A%2C5.11%2CGB%5D%2CCyberDrop%2Cupload%2CCyberDrop%2Cfile%2Cimages%2Cfree%2Chosting%2Cpack%2Calbum%2Cset%2Cpacks%2Ccollection%2CAlbum%2Cpjday%2C%5B15%2Cfiles%2C%3A%2C5.11%2CGB%5D%2CAlbum%2Cpjday%2C%5B15%2Cfiles%2C%3A%2C5.11%2CGB%5D%2Con%2Ccyberdrop.cr%2C%5BReg%2COPEN%5D%2Cpjday\",\"page\":\"https%3A//cyberdrop.cr/a/qehx2x2L\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 35\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f2284983a0caa02c439d24813a1cecdb","sha1":"84c61af6614db2f964b3c00196620c8159024d2b","sha256":"c3114a3a7ecc0827a58ec55cf1bf141b3d35802062eec8be20b9f41c53635626","sha512":"b4ca5767a4c5e55b632ad7d4e28041536691f82165f0d03f2a7b8040d43d2a6814814ce418f1208b6909e82e46d066ccbd8f95eeb6230dbb5ff4b4f4c8614b2c","ssdeep":"","tlshash":"08800404310dd4355d7070407d00451d30d1740154004c1410f1004d47003104005c55","first_seen":"2025-10-28T19:29:30.862405Z","last_seen":"2026-06-02T03:09:22.349057Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-2009817160:1763894635524192\u0026ifkv=ARESoU3sq03gFvtYwn3RcNqV05OY5vhQtFfHjwEWEb5gLo36gzeBjGaRxn9muogtsKl1mJi2dGtztw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"74.125.205.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:52 GMT","end":"Mon, 19 Jan 2026 08:35:51 GMT"},"fingerprint":{"sha1":"95:94:D2:A2:42:3D:9B:2F:BB:65:03:35:EA:85:1D:B6:C0:BB:E5:07","sha256":"53:9A:55:C8:25:B4:4A:38:C0:A9:FD:A8:38:B3:FD:CA:8E:7E:1F:2A:79:A9:52:76:8C:00:7C:7B:96:1E:45:33"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-2009817160:1763894635524192\u0026ifkv=ARESoU3sq03gFvtYwn3RcNqV05OY5vhQtFfHjwEWEb5gLo36gzeBjGaRxn9muogtsKl1mJi2dGtztw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:ytW3W75aDCUItS9v5IuxrBAQBzvVbw:V0QyyIoCHk-mHMrD;Path=/;Expires=Tue, 23-Nov-2027 10:43:55 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S-2009817160%3A1763894635524192\u0026hl=en\u0026ifkv=ARESoU3nMzvgFwacTX-3ndt5-0wqaFXK2NgSsU6lR8y5YMs-u5eYJTfPslTfYKghbrJKEb8ll68iOQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-Kzv_9Azb-2IV8ikD6_OBKQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 416\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.trackingtraffo.com/creatives/k1qy286gxmd5g3dpr397nw5v/1697196454419-oHscg32D2lDl.jpg","fqdn":"ads.trackingtraffo.com","domain":"trackingtraffo.com","tld":"com"},"ip":{"addr":"88.214.206.19","port":443,"asn":46636,"as":"NATCOWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"trackingtraffo.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:40:E4:60:03:38:F6:DD:95:11:44:54:AB:91:B5:49:B8:BC:07:74","sha256":"3C:C7:47:F2:3D:06:F2:AE:3A:30:27:A0:60:4F:0F:95:AD:31:50:9D:9B:94:67:A9:87:5E:65:A0:4D:F2:BE:C7"}}},"request":{"raw":"GET /creatives/k1qy286gxmd5g3dpr397nw5v/1697196454419-oHscg32D2lDl.jpg HTTP/1.1\r\nHost: ads.trackingtraffo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Nov 2025 10:43:56 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 102808\r\nConnection: keep-alive\r\nETag: \"a461468e00957c321e90ae1545fc16ee\"\r\nLast-Modified: Wed, 19 Feb 2025 18:43:42 GMT\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nVary: Origin, Accept-Encoding\r\nX-Content-Type-Options: nosniff\r\nX-Ratelimit-Limit: 28090\r\nX-Ratelimit-Remaining: 28090\r\nX-Xss-Protection: 1; mode=block\r\nX-Nginx-Cache-Status: HIT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102808,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 300x300, components 3","md5":"a461468e00957c321e90ae1545fc16ee","sha1":"b12a600def2f8ff888f416d86c507c95a09764a8","sha256":"5a198d437f38f302d991672c9cda688dca0833b995f0f960e7b8bb7a2fd01300","sha512":"ef364a9f7020974478ce6593184577ec0dea98a5c359a0f53cf8101d49b2ea05ac354778531ef6256457613642e1702a87e82b2cba4cce4169c025c6f35396ad","ssdeep":"1536:adDrKz55gJNtaLNQr1Zkz8C7ULFGOqQkRoGNlPabfNmm0y/Ty/QT5T:qDGFOHUIoz8CILgOOSbqyu/kx","tlshash":"79a302f0e1888ce47bb745b4e6f05353da116654b707d884f081e738bb65ea28d9ecca","first_seen":"2024-08-12T05:22:51Z","last_seen":"2026-06-06T21:44:25.416531Z","times_seen":283,"resource_available":false,"data":null}},"time_used":1068,"timings":{"blocked":335,"dns":26,"connect":100,"send":0,"wait":99,"receive":297,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/a/qehx2x2L","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T10:43:53.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /a/qehx2x2L HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XRdlF0VdX7eb8mhJ; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg1_=eqWeQ2hkJv1zOmkbvG06; Domain=.cyberdrop.cr; HttpOnly; Path=/; Expires=Mon, 23-Nov-2026 10:43:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 23 Nov 2025 10:43:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: no-store, no-cache\r\netag: W/\"86b3-DrsKzuuJzPE7hN35AtK6sn+eCF4\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":34483,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (8570), with CRLF, LF line terminators","md5":"0cfdbdde27effde845062dcfa0c2cb22","sha1":"0ebb0aceeb89ccf13b84ddf902d2bab27f9e085e","sha256":"d5fb696e4cf391df685507a6e15f2ff460e000eb7d15ab979e76a312687b1b62","sha512":"3c0ee906bfd649a4abfe80d4ccce67265324e52a9045572c940de9476478fe760836fdf775d524497d18e18f4df41268ec72c323984d233d28105f2bd0dd519b","ssdeep":"768:UqXmgOWjsqfRbjObGN5qXmgOWjsqfRbjObG/tzJ7ae40M7:NPEx9J7aaM7","tlshash":"fbf22b71e1e3587703a389d472bab724f912910bda0f9504f2ac86d25f63d83d9b3678","first_seen":"2025-11-23T10:44:25.830731Z","last_seen":"2025-11-23T10:44:25.830731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":61,"dns":9,"connect":18,"send":0,"wait":138,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sun.cyberdrop.cr/thumbs/mainlogo-Uxqa41d8.png","fqdn":"sun.cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"104.21.27.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 23:03:00 GMT","end":"Thu, 29 Jan 2026 00:00:24 GMT"},"fingerprint":{"sha1":"CB:D2:F4:89:1B:F5:1E:79:2F:01:9C:A9:B0:83:D9:A9:B9:A8:E0:74","sha256":"AC:36:24:8E:24:07:92:D7:1F:26:7E:19:C1:20:8F:2B:BE:F2:BE:54:9C:F8:9D:DC:5A:00:3C:0A:B3:9C:A7:D6"}}},"request":{"raw":"GET /thumbs/mainlogo-Uxqa41d8.png HTTP/1.1\r\nHost: sun.cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=X9HuqABGMPMYgBrn; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 71632\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: no-referrer\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400, s-max-age=15778800, proxy-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Sat, 22 Nov 2025 11:15:26 GMT\r\netag: W/\"117d0-19aab46ac6f\"\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uspGrTQ9XFJ%2B2erc4uxR3ICcpqJoRwBGfekWYT2bpE7d0W9OzrBvP5FJH8llD76iVgKkNP0xP9J5EGVE5QXRqEoCYMkL1BRWRfFSgvzT\"}]}\r\ncf-ray: 9a301179da2f712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71632,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b803a1fdf3c5ceb0edf80216e786daea","sha1":"86883c79b9ce4bfbe0a5c0bb273d13764e46741b","sha256":"8536052cde21840db2a1dfbe9a04efbbc7944c27eaf0746ebf4d780b2d305a53","sha512":"c229b6820a02561a4ac8be02f14ba55b9af406d70fe002af5d1dbbe104431e5181b17c9c5ddddaf88a45a4edfe1049506111f45b1a03d59a527546a29faf4ab9","ssdeep":"1536:zGKuJNyccI59MhGR0tNjvtyYcVWMOQ476FbuqapET+P/UIy+:aKuyccmChGsjvtk7479u+0ID","tlshash":"9e63022a371cf25afb461874989a35e6cfb56acf3124d0ba6c403685ed43e3daf94143","first_seen":"2025-11-23T10:44:25.832444Z","last_seen":"2025-11-23T10:44:25.832444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":61,"dns":34,"connect":1,"send":0,"wait":38,"receive":39,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"sun.cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/check.html","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:50 GMT","end":"Wed, 21 Jan 2026 14:23:49 GMT"},"fingerprint":{"sha1":"E9:28:A4:8C:0F:4E:25:88:BF:F6:CA:48:D5:03:97:AD:CC:50:A9:29","sha256":"B3:49:9E:D1:5F:3D:B4:77:B7:0B:91:37:97:BA:D2:DE:6A:BC:F7:7A:4D:70:AB:EE:F6:3C:DC:55:0D:18:7D:0F"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 23 Oct 2025 09:18:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f9f2c9-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d50a192c.b-cdn.net/js/script.js","fqdn":"d50a192c.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: d50a192c.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Sun, 23 Nov 2025 10:43:53 GMT\r\ncontent-type: text/html\r\ncontent-length: 150\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3573780\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 502\r\ncdn-cachedat: 11/23/2025 10:43:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c9581fa0ba0638ac85037c515da973bb\r\ncdn-cache: MISS\r\ncdn-status: 502\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":73,"dns":20,"connect":1,"send":0,"wait":18,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/js/misc/utils.js?1117213","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /js/misc/utils.js?1117213 HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IuOqDqeTV7Gj6sug; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 21 Nov 2025 13:56:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"621-18f97589269\"\r\ncontent-encoding: br\r\nage: 161263\r\ncontent-length: 1009\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1569,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1534)","md5":"039674e4481d1e2fd7f160f241967134","sha1":"3ccf618c93ad1ad0e7bfcfca20db1a90fe10de59","sha256":"9f230bbd87c2d9e71004c405d5623bc2c9d2371d803ee4f7f9545fcd7902eb8f","sha512":"61f7c3d484c07b34a960a68fd5d9949b9c18fef51abdfd9ade74b48ff204e04c4ec6055de5b83be605d5c252f904f18b0a1b01963fd53f939fb71b8af552e9da","ssdeep":"","tlshash":"313153b290f1a62381d758936a6c41d46c1049472556437cf703c2a661f4c8f82ceff5","first_seen":"2024-01-21T23:06:43Z","last_seen":"2026-07-11T01:49:34.055096Z","times_seen":35,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/solid.gif?z=2046805\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ShxjofZaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=5182148179544576\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C7937%2C3883%2C735%2C3665%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"POST /solid.gif?z=2046805\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ShxjofZaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=5182148179544576\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C7937%2C3883%2C735%2C3665%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.tag.loaded\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nUID=251123054310f449b54ceb440da9940ee632; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-07-11T12:40:06.330165Z","times_seen":22571,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=196027","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=196027 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Sun, 23 Nov 2025 10:43:54 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://cyberdrop.cr\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":85,"dns":7,"connect":26,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/get/2046805?zoneid=2046805\u0026jp=_clacghpzbsdogkavgklqbx\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ShxjofZaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=5182148179544576\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C7937%2C3883%2C735%2C3665%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"GET /get/2046805?zoneid=2046805\u0026jp=_clacghpzbsdogkavgklqbx\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=ShxjofZaHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=5182148179544576\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026tp=0\u0026vp=0\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C7937%2C3883%2C735%2C3665%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nUID=2511230543bb26cfaebeed4ff2954f9da360; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2165), with no line terminators","md5":"30e9b61eeb0e8f4e040f2c73a1513e4b","sha1":"03bea7a7f66976580e9314761a0e74fb7586f9ce","sha256":"34485ac98fb3ef1f61e8e0d297a8dbe6dad792d1f00a9e6cfdfb5a2e76606ac2","sha512":"133ac465106c53491baf1a89e2bcb2dd26773ce8ea64bc4c13f427ed08df82d3211ffc711eca98a01fdb4394d64e3f738ac1ad63d421993c912cd6221bf28203","ssdeep":"","tlshash":"2e418696e4e8cda742f4cd8c32a59fd6350c0266961bb6390974ffdc94580f115dee83","first_seen":"2025-11-23T10:44:25.834537Z","last_seen":"2025-11-23T10:44:25.834537Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"holahupa.com/get/2046805?zoneid=2046805\u0026jp=_clacghpzbsdogkavgklqbx\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=lYZwG7taHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=4337723249507328\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C21368%2C5274%2C784%2C5056%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"holahupa.com","domain":"holahupa.com","tld":"com"},"ip":{"addr":"94.242.247.29","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:55.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"holahupa.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 19:57:24 GMT","end":"Tue, 30 Dec 2025 19:57:23 GMT"},"fingerprint":{"sha1":"72:24:0F:4A:7E:50:64:84:AB:01:DA:5C:95:C9:7C:B7:00:AE:BA:55","sha256":"5B:A2:D4:8C:AA:D6:A7:EB:1C:36:ED:AE:B4:B7:A4:32:78:D0:0E:7E:CB:8E:8B:26:3E:F5:8F:1F:33:53:38:F3"}}},"request":{"raw":"GET /get/2046805?zoneid=2046805\u0026jp=_clacghpzbsdogkavgklqbx\u0026dr=49\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=lYZwG7taHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=4337723249507328\u0026caifrq=ADNFdQAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026tp=0\u0026vp=0\u0026pi=W1oqmg\u0026pload=1493\u0026rlp=%5B0%2C48%2C207%2C120%2C21368%2C5274%2C784%2C5056%2C1%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: holahupa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: CHCK=1; PTS=; UID=2511230543bb26cfaebeed4ff2954f9da360\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: PTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\nCHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:55 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3232), with no line terminators","md5":"c172ff408acfd17ab3eb865bcf7788c7","sha1":"36d191461e259a7e238e65028abd48d7940a6be2","sha256":"3d2b468e93c09402097cb38f552f2a41481b72dce894939e787fe5dded466b4c","sha512":"66f51b0f6db8f4ffd14b0642bea380f4a95a887be5f95056cc6457fb5d53cc5d6f3056ca0656f7e912ece2242804b002e692d57a956a8d3226f26eeca2e8eef2","ssdeep":"","tlshash":"466185d49094c8fd06afcb1c212ebcfadcca74927a7a891a8356d84684d0c3dcf3d012","first_seen":"2025-11-23T10:44:25.835719Z","last_seen":"2025-11-23T10:44:25.835719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/libs/bulma/bulma@0.7.5.min.css","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /libs/bulma/bulma@0.7.5.min.css HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=v9qu1i8ob3fVF82m; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 19 Nov 2025 14:41:12 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"2e881-18f97589209\"\r\ncontent-encoding: br\r\nage: 331361\r\ncontent-length: 23379\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":190593,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a6bbc38bc700e01c0ef510c4ca235379","sha1":"852e1cc708b838afbcf2a786e3a399a064885f95","sha256":"bcadd44e8ffcc076da527f9d4d00f45fa77389da9ce65ee0733bc7f819e8c309","sha512":"e5c72a72c48d6d8c2dd0edd969c9fa33b854aa78fa2e73abc54ba9a47220fc525d25081d6fae9aad26d7ec9d1af71de735ef190d23a0995427aecbbbf2f36bcf","ssdeep":"768:84OOR6ys5KqHKAmk870NlD1Oyy8ry05DEJ+09DKMzsRLcB73yMBgfFlWxKrsbkcY:AUPDKh","tlshash":"f2147662ee543c4f3513882e54d0f794272e59c8da2627b7b577b2e0860a68f1937f0b","first_seen":"2023-04-13T01:12:38Z","last_seen":"2026-07-02T07:46:50.886328Z","times_seen":94,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyberdrop.cr/libs/creativebulma/bulma-divider@1.1.0.min.css","fqdn":"cyberdrop.cr","domain":"cyberdrop.cr","tld":"cr"},"ip":{"addr":"190.115.31.35","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:53.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyberdrop.cr","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Nov 2025 22:29:33 GMT","end":"Wed, 04 Feb 2026 22:29:32 GMT"},"fingerprint":{"sha1":"C5:51:DA:B1:E6:0E:01:05:66:42:FC:40:9C:24:66:1B:BA:09:92:4D","sha256":"F3:6B:66:39:52:66:1D:C0:9C:50:73:1C:9A:6F:BE:04:CD:CF:4C:C2:72:09:9C:F9:93:90:47:02:08:A0:1A:F2"}}},"request":{"raw":"GET /libs/creativebulma/bulma-divider@1.1.0.min.css HTTP/1.1\r\nHost: cyberdrop.cr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/a/qehx2x2L\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=XRdlF0VdX7eb8mhJ; __ddg10_=1763894633; __ddg9_=91.90.42.154; __ddg1_=eqWeQ2hkJv1zOmkbvG06\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CIT9fD810vRaHIgc; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg10_=1763894633; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\n__ddg9_=91.90.42.154; Domain=.cyberdrop.cr; Path=/; Expires=Sun, 23-Nov-2025 11:03:53 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 10 Nov 2025 18:06:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=2592000, must-revalidate, proxy-revalidate, immutable, stale-while-revalidate=86400, stale-if-error=604800\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 20 May 2024 18:51:55 GMT\r\netag: W/\"838-18f9758920d\"\r\ncontent-encoding: br\r\nage: 1096628\r\nddg-cache-status: HIT,MISS\r\ncontent-length: 595\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":2104,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1980)","md5":"8e0e8c5c95a15f7bc7eee9fa1c85bbe6","sha1":"8f748e2659c659d22e054fc6082ab673a2f4625e","sha256":"3211684794e706d1a394bc8b453e1de8d9aa95f89f28136c44e67ff101727095","sha512":"df991b78cac621097cf77fd68d548ada8d11bf72a834f140943eda8c2faf4b752a9df9a77b7339c237b6e6175273298ba1b6ba2943774183648619c6b707830b","ssdeep":"","tlshash":"7441c063ecbd4cbdb22fc11d8ed0bf56f22e2aa5a4504f2ae057e619c10e0592d235d6","first_seen":"2023-04-13T01:12:38Z","last_seen":"2026-05-13T21:38:23.924722Z","times_seen":18,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"cyberdrop.cr","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"androidduvetscribble.com/get/2021514?id=2021514\u0026jp=_clbyessbcfrosmnzhwmigo\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=wpbIgB0aHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=1522973482342400\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1253\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0","fqdn":"androidduvetscribble.com","domain":"androidduvetscribble.com","tld":"com"},"ip":{"addr":"94.242.247.35","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"androidduvetscribble.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 14:23:50 GMT","end":"Wed, 21 Jan 2026 14:23:49 GMT"},"fingerprint":{"sha1":"E9:28:A4:8C:0F:4E:25:88:BF:F6:CA:48:D5:03:97:AD:CC:50:A9:29","sha256":"B3:49:9E:D1:5F:3D:B4:77:B7:0B:91:37:97:BA:D2:DE:6A:BC:F7:7A:4D:70:AB:EE:F6:3C:DC:55:0D:18:7D:0F"}}},"request":{"raw":"GET /get/2021514?id=2021514\u0026jp=_clbyessbcfrosmnzhwmigo\u0026dr=49\u0026cuaa=2\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.637-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=yhsVz70CQJY3\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=wpbIgB0aHR0cHM6Ly9jeWJlcmRyb3AuY3IvYS9xZWh4MngyTA\u0026afid=1522973482342400\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=0\u0026pload=1253\u0026rlp=%5B0%2C48%2C162%2C93%2C3980%2C2352%2C511%2C2134%2C0%5D\u0026srw=1280\u0026srh=1024\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0 HTTP/1.1\r\nHost: androidduvetscribble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\nUID=2511230543e2a57add0fee4cf7a5c02a77c2; Path=/; Expires=Sun, 27 Dec 2026 10:43:54 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3252), with no line terminators","md5":"fe3641ed80c3a90d3c2ae14cfb6e9497","sha1":"6f4336e97fe100fa80e9f2a3753ab97d151977c7","sha256":"a86eb60a45518e6e0b485b9a085d59d649f8cb2bda741334e417e7fa3233224a","sha512":"0a03385a479c8eade0eefc22a2d1f331faf5baac79a3391aa20abf70ce24d35e23f9307b3ab5dc01694e77cde1eba420bdee85b0110be55fcddbbe5b323892fa","ssdeep":"","tlshash":"0461a6bced5dd8e19da464042e37dfc6f9c029ebe9335d01e887c8b5f8858b14632480","first_seen":"2025-11-23T10:44:25.838224Z","last_seen":"2025-11-23T10:44:25.838224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3c77b61cf5.ce82e64744.com/in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDY4NTQ1MjkzOTM3NjMzMDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjgiLCJ0YWdfaWQiOjE5NjAyNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjUsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"3c77b61cf5.ce82e64744.com","domain":"ce82e64744.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3c77b61cf5.ce82e64744.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Nov 2025 02:47:53 GMT","end":"Wed, 18 Feb 2026 02:47:52 GMT"},"fingerprint":{"sha1":"39:AB:B8:00:FF:A1:92:11:23:9A:A8:F6:8E:7E:7D:29:EA:07:1E:15","sha256":"EA:12:63:88:EB:00:98:DA:0F:32:E8:45:33:73:AA:9A:4A:D3:35:44:04:DE:2F:E7:98:F9:8B:9E:EA:27:F2:39"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MSwic3ViaWQiOjAsInVzZXJfaWQiOiIxMDY4NTQ1MjkzOTM3NjMzMDAwMCIsInRpbWV6b25lIjowLCJ2ZXIiOiIyLjM4LjgiLCJ0YWdfaWQiOjE5NjAyNywic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjUsImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: 3c77b61cf5.ce82e64744.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nOrigin: https://cyberdrop.cr\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-length: 0\r\nserver: nginx/1.20.2\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nx-cdn-host-id: AH1747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T14:06:41.546277Z","times_seen":17163256,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":124,"dns":72,"connect":21,"send":0,"wait":31,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.wpushsdk.com/npc/sdk/wpu/npush.m.js","fqdn":"js.wpushsdk.com","domain":"wpushsdk.com","tld":"com"},"ip":{"addr":"45.133.44.52","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyberdrop.cr/a/qehx2x2L","date":"2025-11-23T10:43:54.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.wpushsdk.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:32:11 GMT","end":"Sat, 31 Jan 2026 07:32:10 GMT"},"fingerprint":{"sha1":"5D:B0:51:22:B4:86:47:42:74:7D:68:50:E7:C9:08:D7:7B:41:91:8C","sha256":"09:01:AE:7A:8E:97:6A:90:A0:1C:ED:8A:B0:05:D4:B3:89:1C:C9:7F:8A:21:8B:8D:59:7F:5C:48:74:65:0E:99"}}},"request":{"raw":"GET /npc/sdk/wpu/npush.m.js HTTP/1.1\r\nHost: js.wpushsdk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyberdrop.cr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 10:43:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 05 Nov 2025 11:07:09 GMT\r\netag: W/\"690b2fdd-3e601\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 23 Nov 2025 10:48:54 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255489,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"3e9adbe310dbc78464aa866453b256f2","sha1":"b7bba1f7c7eddbda13ecf1b0952de3a392b9e770","sha256":"163e33d6f2786e0c68927a1a7d8b282f606c2f3b6f045bf1840a1c57e6745c28","sha512":"28fac537344ef5bc29be086512ef5d449f1943a291b5b0f6833ed8e9e9b0e5294bed4432c3f8e730e254a8392eb2b457313a001525be7c7566ad7c9d3e3e3572","ssdeep":"3072:vt+5CPB7vcQ7qKEPsvQaEvpiBz3gJ7BWCq1+8Q43XG2nl2LqR9TkK:FSCdcQ716vbFBW3+6hf9TT","tlshash":"0a446bd1369478b00593c0afd0770201b2382609f529b56cbabddeea6586dce2377f79","first_seen":"2025-11-05T11:28:02.144909Z","last_seen":"2026-04-10T08:08:30.466871Z","times_seen":374,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":83,"dns":21,"connect":22,"send":0,"wait":47,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"js.wpushsdk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}