{"report_id":"cc5c4c9b-b213-4535-89df-44e7f505c191","version":0,"status":"done","tags":[],"date":"2026-06-28T14:27:10Z","url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"172.67.213.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"title":"Ventuals is sunsetting","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"172.67.213.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T14:27:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"event-hyperlendfi.live","ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T14:27:21.113793Z","last_seen":"2026-06-28T14:27:21.113793Z","alert_count":23,"request_count":23,"received_data":1173249,"sent_data":23887,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":744894,"sent_data":5396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"103.101.85.74.sslip.io","ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"domain_registered":"2015-08-15","domain_rank":0,"first_seen":"2026-06-28T11:40:49.714593Z","last_seen":"2026-06-28T11:40:49.714593Z","alert_count":0,"request_count":2,"received_data":3795022,"sent_data":1002,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"event-hyperlendfi.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d5e085d74b51b","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efdab5154b8f5fd13a0e05eb99bc20b5","sha1":"d14129f87461cdc8e7f2615aaa03be743a8078a2","sha256":"dc7aa3443d6f1be935bb94361c1cd7ec954d5e3e1cb20586eac7c3223efaf7d1","sha512":"1fd46df07b2e417d09d183d1432891e10a1aad5e16cbc2f5eb8160db68cb52e6bfa2e896297cb882ca935207d90046176217e2bdcc79f009a2b6951307263c97","ssdeep":"3072:hNSyvFUuHny/rshxN/k0rExnAoP0rNNUz4CZDhyk:hNSyvFUuHn1hvs0w1P0RO5DYk","tlshash":"0b240a8dbac6750b029f9839c13b344db36b4c80401859a9eae1d2f13fd179775bb6e8","size":220089,"data":"","first_seen":"2026-06-28T14:27:28.097918Z","last_seen":"2026-06-28T14:27:28.097918Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/4ae437a7-2fce-4319-9ce2-fcb97078dd93","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T06:39:51.947992Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T06:32:16.003533Z","times_seen":758504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d3af2784b8abcab26cf9df040e8f2534","sha1":"988cb471a6d4fe64359b9d23f6c0bbd8e7c2d2f2","sha256":"ddc2535b6480b53cbddaf9f22b202eb4120eec6596cc081ef18b2cb8560567c7","sha512":"c9e856431cb3a1de4954d84367e0a75d4f86f60507770ca58dead12a824d640121dd9db2a36b8bc07d995803b4924a10eb2db1ffbb9efbed70f37cfd333beac1","ssdeep":"3:N/BKL1Xycf:eL1Ccf","tlshash":"c55504c0744030711411cd00d3503415544505053d1d0411f05d0cdc17300000c5d544","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.152569Z","last_seen":"2026-06-28T14:27:28.152569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"76a39b8756c62ec2eb9392a3f7f1d75c","sha1":"74cd90f36b64c1957e9b0ec3d0f112835fdf82d0","sha256":"708eb442fd3171f80b8e2def1c8942e83f244781a81a9b74b55c155754f041a3","sha512":"78cd5379a05e466c68ba1e00e8ddae7e926ae20f779d59e649a890e6343d1a287cace34658de6c558a230ca32b51e1c34af6b927a1bc9ae3df3f51b8f76ed17f","ssdeep":"3:N/BKL1X9Dn:eL1B","tlshash":"365504c0fc5030f10410c400d750141550070501351d1451705f4cdc3774040045dd50","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.15534Z","last_seen":"2026-06-28T14:27:28.15534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/ad5b9fd6-9496-4ad9-90e3-41dd7dbc7c43","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T06:39:51.947992Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cecf2070a6a8b5a212c82031e9fc908c","sha1":"fb514ed954531a1b3abbb0cdd1bf5d4f5d9f42b0","sha256":"0af3b42677ad980014f4bf85e233f644d5bae09889e61b59e8fe5a960abab9a4","sha512":"c9c95752ff2f538ad69ba162900a3c3dfba2248bf7ee6e004329b1eaf014d59d7387bfd496babdd3e85d9946a5462506cfbb5770b730793c459f086d8741d2e8","ssdeep":"768:9oIv9IGXZ5qYUb4iz0UW90Fi5c66cZdcs2CLchIec2QD:Bv9IEKCGc","tlshash":"5f13a7d1660be0e89e5611eed077f801e05819abceacf097e92dddc2352df22858717b","size":42625,"data":"","first_seen":"2026-06-28T13:56:46.235349Z","last_seen":"2026-06-28T14:40:33.891545Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-30T06:36:00.891683Z","times_seen":59771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d170f2a8bf0eb4df77f257ed78489364","sha1":"30b8780dd3025fc44472c01f91bef3215d2c015a","sha256":"d3bfe6c764f9e07cc0caffe936f0c568fca1eb8614403952aff7411712b92a37","sha512":"4da00e2346f637a073f0b1f0b07c72ff1dc7402e3aa6a56080a1adf1ff2ae4af70236cb7fb5193d7aaf99f3b52dea0a4b2fd5f8425dfbdaf88d58d261177f2d7","ssdeep":"3:N/BKL1XycDSn:eL1CcOn","tlshash":"d05504c0744030715410cc30d3501455740505011d1d0401705d0cdc1730100045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.159462Z","last_seen":"2026-06-28T14:27:28.159462Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d67e2844fc697d81bab7898b45920952","sha1":"a0c5f38be946b80e409fc28513d32d5e8b10c8c6","sha256":"ebe05d2b232bf8941d767946a19f692f93e9736ea4a1e3298ec1d22cacb83697","sha512":"2339e61cf40ab8b6fca1532aadc52470dcd4ab2c9d7b4e120e77c9377ada1b5ed737af23be5b46c18a392a352e9a192019f6606334a189ea4535a0fd893e6131","ssdeep":"3:N/BKL1Xycgn:eL1Ccg","tlshash":"2e5504c0744030710c50cd00d3501415550505011d1d0441705d0cdc1730100045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.161681Z","last_seen":"2026-06-28T14:27:28.161681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7ef27ca41965372085d6372a76fb88e4","sha1":"cfbef01ab6c18e53d00932be120e0a435714bb3f","sha256":"61bf7a5b0436a830b65f5a303ca6ecec0566c0cb5846f521e2067a80c35b5f5d","sha512":"ead56428529d8c8858ab6d635f44f402c5e27371593a2e98ad19714272a36cc5f8c824a6a7cac1eac46f1f8900049638c06af82bf6e7fc0477cb2b68907d1cf3","ssdeep":"3:N/BKL1X9a:eL1I","tlshash":"c65504d4745030f14410c400d354145550050501355f0441705d0ddc1770040045dd50","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.16406Z","last_seen":"2026-06-28T14:27:28.16406Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/jquery-3.6.0.min.js","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-30T06:31:47.946307Z","times_seen":485824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T06:39:51.964371Z","times_seen":6189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3d392330c605dc568ebd2eb321b6b3e","sha1":"7fdff99cfd5db8bfee10014301d590e99d5acfde","sha256":"c07b4b95bced69827a915936a59125b6073386409f2ca10b83a106bb5851d3b7","sha512":"1372e96bf7bfb967c17513e8e3867a3b4375542b10e8ba06088cafad766290800afb3bd2a25c005ae99ec3fadd391356d022f43cdcb0b3ad2767a8481277f084","ssdeep":"3072:pa9LzQoXi6Eb2AXchKJJWw5Nu2BCAAYqEgFZn4WaKsOeosnnazWBVCzf2WpP:pMLJWPew5Nu2MA7qEgfRsmyazbP","tlshash":"b734f889bbc3b00a121a557d803b309db26bdc54601c0d69e3e19df43be2759b5fa9f8","size":234772,"data":"","first_seen":"2026-06-28T14:27:28.174401Z","last_seen":"2026-06-28T14:27:28.174401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"54e1b00687c6b3e91d6ed5405ab2c567","sha1":"34995487462bbad60d3147a484fedf00745e36be","sha256":"b329e51b4ca3dd4c3036612e5a11bbe4025d69ef5c3d175fdeb33c5bbbdb7eab","sha512":"c060b7cc4b314aeb0bfb432ac360057f76d721aa920024f3f9eb843d5e17622d758bfaab3a39d1aae76ed4aa94922ac72709ad66d06bcc8ae58d5d54c6ef9501","ssdeep":"","tlshash":"93c0222ef13f4d44a1231420bd3f36a0cc2b718810083e89aa2a08c607624c0a5d1fb1","size":192,"data":"","first_seen":"2026-06-24T10:51:52.218115Z","last_seen":"2026-06-30T06:39:51.953673Z","times_seen":4086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf9d56272a688eb8581e60f909e2151c","sha1":"d6cfbfc2b9357bafefaad14692e8b3bdd6b938ca","sha256":"eb805e8c25a077926fc307cb57bfc2d6e3d636dbc357e226a9fed8e669cc48ca","sha512":"401eb92b86a7780f758b687a07824705082fae3e752e02506a69a287aca88eb93ca3c0a71f12085bbde654c85fd830751c5d7cc5540ae4b2fff71952fd288aca","ssdeep":"3:N/BKL1XycTWn:eL1CcTW","tlshash":"105504c0744030711411cc41d37114155c0505051d1d0411705d0cdc37300001c5dd44","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.178872Z","last_seen":"2026-06-28T14:27:28.178872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bed9b79fc608c3cbd2d51a863ac645a9","sha1":"f65801c608cb7779e76b62203431ee90eee96e7b","sha256":"646a989550f996e6d46807591d8fc826da3297848532478df49fd612da1afc6d","sha512":"547d6be80438ee0da76e5116a14cd26681adc2e824513d50895190e943a4574cec32ff36e3e2f2ae977eb96be690431c53cc3dcf7a78d6fa4e0a36f27b40e1c7","ssdeep":"3:N/BKL1XycIcW:eL1CcIn","tlshash":"895504c0754030711414cc00d3705417540505011d1d0401745d0cdc1734001045d740","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.181405Z","last_seen":"2026-06-28T14:27:28.181405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d15208d06115dadda5460adb21336136","sha1":"3c013927e952fff1603232a804fcb347685190e6","sha256":"9c4bf2a2ea2377c9c77803567143cd859fa393a7552174e067da80d558ebc241","sha512":"9e389a5c800df8a78dd20ab1c1aaec0101541dc183103080af02ca2ea266adcc84f05c8a262f17fcba64d9ddbc86cb7fed468444ef62b7419a8cce891b010ada","ssdeep":"3:N/BKL1Xyci:eL1Cci","tlshash":"625504c0754034710450cc10d3501455541505011d3d4441705d1cdc1730000045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.183793Z","last_seen":"2026-06-28T14:27:28.183793Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6e2d8a7f65c94dabd00d437441b90ce0","sha1":"e1c37696431bfd9e6d97bab3e4ddf4d187e9ab3c","sha256":"7c55ad6b2cde8f231f6fadd5dc4c3d948b10290b6f66567d2253019059b900a5","sha512":"9fba895c9f9c12e0be849d21bff0161f2f2ecb1594b3076b9d645e316e1acc5625bba3615de469e045c949223b546e078f2ac74c8e7cde2c9a5d698ae011a8c7","ssdeep":"3:N/BKL1XycjTSn:eL1CcKn","tlshash":"9c5504d0744530711410cc00d3501415544505015d5d4401705d0cdc1734000045d541","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.185554Z","last_seen":"2026-06-28T14:27:28.185554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/6e79e2df-2e96-49c1-bec8-434170b79eb8","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b7b7178dc9e1ba772f98b71de4619a","sha1":"594be25bcc83d0e2f0879a7ebd48743890bd0e11","sha256":"1671e1ed085d3e80f523f402a0c74cdc18ef04662991c7d6361e24c8d02c8492","sha512":"6af688399aff451e7510200bc079e19e770cb47c226215392107f635897034bfe69d54e00bb60cff6ea35f55db858c2f351f65d4e3a075170adb51d1d140e397","ssdeep":"49152:uIffQctP4ZDXwX1P4oKJLgzwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt+a:vAcl4ZDGArL3","tlshash":"27f523c1f853a0f34f180265a0e65d4b4499481b69eca1bee75cfdc134fea9382e7e85","size":3592811,"data":"","first_seen":"2026-06-28T13:07:48.018694Z","last_seen":"2026-06-28T14:40:33.91559Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/?__cf_chl_rt_tk=M5aqqcA7X8O2DOIsnOtmH7BlGXLDstREvPct6fqwoVg-1782656794-1.0.1.1-9GSnxJ1giZgYIL5wxeyFd_COGL6QyZtvRKhqWig5dfA","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T06:32:16.003533Z","times_seen":758504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6be003e7c92919014c9284c2c2c8293c","sha1":"734fe85c67efd700ee5a0c44670791af03af514e","sha256":"b3fbc9c574d8abf6d03d3af66ad306d33615953ba53521dbc9da6cd0a1a06be9","sha512":"2824bcd2c8f69824b2b0d3dbeaa0a6ec144f23fddad3019b5dbe1a4c0753621ad51c2faaf3afe5a40c230b34fecd36dd92b30896a5732c97f79f0148b975f9ec","ssdeep":"3:N/BKL1XycIXQ:eL1CcIXQ","tlshash":"c15504c07d4030711414cc00d3505415d40505015d1d0401705d0cdc1730000045d740","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.188349Z","last_seen":"2026-06-28T14:27:28.188349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"54b117eacd096dec6f51e53d295851ec","sha1":"86445e0073b9677ed40320a5c90878b96b8046fc","sha256":"5d20cac0cee7c42236a36b8219d4c909f1ceabb833922bd1d1b6e8aa81d8967b","sha512":"6cceec9fef4fb337f8243545aab6815ce03e2cc547c406ef2918fbc2b7e4c0403b63984c6ea9a8e187db2722a4622f7e75270c3ed2a97fca405134de285c1173","ssdeep":"3:N/BKL1XycSn:eL1CcS","tlshash":"b65504c0755030710550cc04d3501415540505015d1d0441705f0cdc1730010045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.190038Z","last_seen":"2026-06-28T14:27:28.190038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f869f642f572573335a9f57aabf3c655","sha1":"b5da2374cc883e0202677d08c8f04d52cb7be7d4","sha256":"119d298e332969c23596cf4e916b6b8995eeffc22be263127cdf8be0468348a3","sha512":"f8d03c0e606c1e638a3a0927aff48b86a21c11ea0a4fb013e4260eeba0433986ba250e4ecd6f0174072beb8e08295e7e2855698d1a02a663c3c915c7c17fdb19","ssdeep":"3:N/BKL1X9p:eL1H","tlshash":"275504c0745030754411c500d3505c15500515c1371d1441705d0cdc1774040045dd54","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.191506Z","last_seen":"2026-06-28T14:27:28.191506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T06:32:16.003533Z","times_seen":758504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-30T06:36:00.885524Z","times_seen":59382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4179c251ea77221d0f066100a4141221","sha1":"1912fd701708dfffa33101a67aa66e7967345698","sha256":"1ee6f7c7416eedb482967d3a42eb029d24da3600ccb98a39695bf125da436e87","sha512":"2d769ea3489120129e299dd4e803c784b1feb84b63eab88b23ddab30c19ad37fd5720f5c5d1211a8aefa608c342ff866e9dcb7c3acafdd00e5f5674cca421900","ssdeep":"3:N/BKL1Xycj2:eL1Cci","tlshash":"aa5504c0744034710450cd00d3511415540505011d1f0405705d0cdc57300000c5d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.19546Z","last_seen":"2026-06-28T14:27:28.19546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d601914b08ee911de4b29bde735b31b6","sha1":"04c76f8d0d582fd4fa4312d3ae350c4da35c3d69","sha256":"6ef37d0939f2cce66bac78d104e46e7f9126a82ef7fb88f9771435b203600ddb","sha512":"0a29409b25ee31e5c8773bcebaa4c458f4898022a7ed2ed4bf4daf5fe480ac4125b58e1b34920f638755d004d0ad4d2b0af9b11d880030852feda51880018bfe","ssdeep":"3:N/BKL1XychWn:eL1Cc0n","tlshash":"125504c0744034714c14cc00f3501515540d05011d1d0405705d0cdc1730000045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.197274Z","last_seen":"2026-06-28T14:27:28.197274Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed823cf9470d714e94babb0d3cd012c4","sha1":"b240e9f75e82bf026052dba67518e7c1a005aa42","sha256":"141dd5168451d0840cc02e820f1c93d70db1279f16d7bab944564e78ab47c890","sha512":"2975cacaccce179737cd5b520d9627ed0a0313321e70eae3abe44128068588b1eab951b5bde0cc1c95b1290fd96fc4a156865330b271842f50490a5141daceea","ssdeep":"3:N/BKL1XycndQ:eL1CcS","tlshash":"6b5504d0744030711410cc31d350141d550505011d1d4405705d4cdc1730000045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.19884Z","last_seen":"2026-06-28T14:27:28.19884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"103.101.85.74.sslip.io/php321/30yid7.php?v=2","fqdn":"103.101.85.74.sslip.io","domain":"sslip.io","tld":"io"},"ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"da75354e559665e0d031ceea0c85be77","sha1":"985c6175d97e4ce1dfc3267c15b0e304091bac0b","sha256":"d2c934ee5268f10f6d3ebed66264b8587307eefcc3134258f61bb866cb9521a5","sha512":"e3df3c2b79155cdbe5f42661bfdb7dc8cd54b9dc069716d939d6a52dca04e383b7d1354184f72ac3b4c41af9db4d7d9d3e60e92dfe8649c2751ef12f0074a393","ssdeep":"1536:Fb/Lkk8GpefuIRSLQOT1oF7LnHoCTEmO/bPE2gb3S2Zk9L:n8GpefuGSL1T1oFTgr/QHAF","tlshash":"90147496db4781dc8ea9118fd1b2f944d5054d128dacbc93ee1edec2611af7680c32af","size":200638,"data":"","first_seen":"2026-06-28T13:56:46.206212Z","last_seen":"2026-06-28T14:40:33.832031Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T06:38:54.919543Z","times_seen":9711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"924820bbcfba783d72a7f738c2ab610a","sha1":"7fe33c81821badd6420ec8c04ad8659b04327cf4","sha256":"4ee96c1874977823f64bbc0fd92d051ab67c21b00725527a144e33392ee8a1fa","sha512":"5441af6215218930a68b56846ffa62adbb32ec53ba609d1386af919a39103e863759385c6047c547a27820d00f0f4997b6bafccfb759bcef13c8f63f30672517","ssdeep":"3:N/BKL1XycUn:eL1CcUn","tlshash":"355504c0744030711410cc30d3501c15540505151d3d0c11705d0cdc17300000c5d544","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.200433Z","last_seen":"2026-06-28T14:27:28.200433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa2276b7a8061317e363141fbb8baffa","sha1":"0f5032793ac021367106ba553402d1a70e41a280","sha256":"19a04ddf2a5b5a06ddac58d276f66367294aa45d62cc29c275277b5cdc04fdd1","sha512":"6fe546de8d0839fae4cb449641382646622027702695a421d49a4f19dafed1022081e81828aff840dc3869c15ece9076af0c34d0f98e9e46d7e1cdbc2260f229","ssdeep":"3:N/BKL1XycnU:eL1CcU","tlshash":"a15504c07c4034730410cc00d3701c5554050d111d1d4405705d0cdc1730000045d541","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.20213Z","last_seen":"2026-06-28T14:27:28.20213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-30T06:36:00.907996Z","times_seen":59432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab0df4fd1b085ce9475bd8caa3cf54c0","sha1":"97597cdbf94d417dccc982fd370612b5eac3ae71","sha256":"40765eb1c22638814d6fed09a90a15e1106c161daca8c79f36fd64c694346aef","sha512":"ac716dc801e0cf67565c242fb105e0f9b386e923fbf56903a99a2d1627addadb8ff566b85bb7fc2f1d9fd1196bfde2cf318d09261a60c387833a3615ed1fd89a","ssdeep":"3:N/BKL1Xycv:eL1Ccv","tlshash":"955504c0754030710454cc00d3505415540505011d1d0441705d0cfc1730000045d550","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.204809Z","last_seen":"2026-06-28T14:27:28.204809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"36de6780dcbfb39069af3086ed7f9ac0","sha1":"55e16b259f19e140d0972f54816a4824ad180bf8","sha256":"2821c41560742253e68a49ea4d186ebc84b427d1e877678c0d135febeaecd804","sha512":"739870a443475c718359df26ee36611f89674310b017c7261773e690146df4afa0f492559184a185676b93d6885c930396256684e69ee8e2a08849adb30c2d85","ssdeep":"3:N/BKL1Xyclcd:eL1CcGd","tlshash":"4e5504d07c4030713410cc00f3501415545705131d1d4405705d0cdc1730000045d540","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.206557Z","last_seen":"2026-06-28T14:27:28.206557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-30T06:36:00.864408Z","times_seen":59706,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T06:39:51.964371Z","times_seen":6189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9bc9fc5fc9635f1ff04022cca3794ea","sha1":"6bdc7a7453848b22ab7f3b4c2322202558097fe9","sha256":"54f53fb5be53d6b77b1c985712c768a4b79dfb25bb290c2e677f2b12ba92ad57","sha512":"201e582f784567e57a7116d2f2f683486a2030c72d2a9c9a5f7199c8b3faac44d1388c35a87e4a1d1d166afef5b8e83d13c06b7922241c77f92c86aefbd27de5","ssdeep":"3:N/BKL1X9Cn:eL1Qn","tlshash":"805504c074d030710510c440d350143550070503751d0441705d0cdc1730041055dd50","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.209244Z","last_seen":"2026-06-28T14:27:28.209244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_6.html","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-29T00:34:58.504001Z","times_seen":1863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/df6fbc6c-65fa-4cec-b761-828543192b01","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T06:39:51.947992Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73cd65eff5e71497220f745f44afad4a","sha1":"c53ec342a90d3297bb78168a4571e3cd7a762593","sha256":"29e63cb73295669933477499ecbe814d1a3f658fe3a3d398a83f55274629cc59","sha512":"c9e17caf194851401d79cd9b550e4b5dfd1907622cdcc52ee8fa7a4582cab2b926090e57d944ca7f1977080953d76ae9d830081386aa4ed175b008ccf980a6a8","ssdeep":"3:N/BKL1XyctQU:eL1CciU","tlshash":"8c5504d0744030751430cc00d350143554050d013d1d440170dd0cdc17300040c5d541","size":1337359,"data":"","first_seen":"2026-06-28T14:27:28.211829Z","last_seen":"2026-06-28T14:27:28.211829Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"13835443b4fd6f405826bae7e69ee768","sha1":"2f079545f9cb44efc0d03bf86c2937626c8abfff","sha256":"44d67868c0afe92b4df2d1e55f81fe7c62c8e827440d5f4f299641923d72230b","sha512":"ea4b34d07ffb76e71d034b81b12d2463ebf098dfe47bb2106cbb047d004714fd9fb2c74fb3ee1473563e97c1e2b5c5051c615f37d742f53cf9a49d0c9497f1f9","ssdeep":"","tlshash":"a2a0020eb437184d42029030783b2555253d3d5844845290966a09b60b5028b5549e75","size":60,"data":"","first_seen":"2026-06-24T11:39:42.331395Z","last_seen":"2026-06-30T06:14:41.294032Z","times_seen":833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-30T06:36:00.891196Z","times_seen":59540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj130 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj133 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj134 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj136 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.4740588186956053] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj128 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj131 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process8//obj132 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"log","text":"map[actor:server1.conn0.watcher16.process8//obj135 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.4740588186956053] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":178231},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":84211}]},"http":[{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_1.html","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.911Z","timestamp":1782656802911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/index_1.html HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AA69qNhZXo0yq4YhJmbiMeuo7V%2BvD7ECecbFe3D4Q3ILB8%2B423H5FFSTRyI8dYK3ACzgvrMC%2BEOFnuPtw6UmJkyEsG464q2%2BrgTUTSAwYs9ppf2KDD1nUDKzX23a1UG7zNOXEXh9Cw7t\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3a3faeb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171,"size_decoded":793,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e077392c817fc1d6f7130b39ec0dcaf2","sha1":"6f7c5c6eead786c7b575399f41278bcf463f7de0","sha256":"1ac27847a1f828bef8e9ed51088d127205fa050a26ea9bc726734361a27f76dd","sha512":"e27d064c9a908bbe91548edefdaf86495a61764fff46523eeb9b6f6a15d89b60ce12d79f7570872b160f77d971e28593aea8ddaac60dbab6a6cb3a4fc5006099","ssdeep":"","tlshash":"16c08c12d8654c8e2a509aa1cb8af6c4c4029d6ed821ad01ba6ea654afa8a20c85b459","first_seen":"2026-01-07T07:56:57.555644Z","last_seen":"2026-06-28T14:40:33.846749Z","times_seen":79,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/64579aaceba9f83a-s.p.woff2","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.967Z","timestamp":1782656802967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/64579aaceba9f83a-s.p.woff2 HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/2aad71242bff6512.css\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3ebdd5-bbcc\"\r\naccept-ranges: bytes\r\nage: 2076\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VY4G9yorO0rjxX0iMZoxkPtQr%2F8UTVabw%2BW%2B3Hruyj5bVnHcVnfYb6bs0ZU1A85mmmXChIh%2F4Uu9KaPdoG%2BeiWXsV97FZJErvnMx5g%2FNJCAdlKNnTcZIh1EO4K9P4oP8qg34SMCeh9Y8\"}]}\r\ncontent-length: 48076\r\ncf-ray: a12d5e3a8fb7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48076,"size_decoded":48805,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48076, version 1.0","md5":"44025666cfb90c19f4a7aaafc7132b9a","sha1":"4db1d1be467ec67084c4bee650a484bc0cb30008","sha256":"b7b2e90334d02effc6f8dc59d45a6ab2105f7ab862449e3b7cad7325c785b504","sha512":"0a070772f0aa52e830c808e3b00208dbd420ed2e2def3552498821003963945511dbbe985c18d22501cab878c403de249c9bd8ec39c93df3b1959d805023c81c","ssdeep":"768:qch31gkJ0Ucgw2446WrQXtdn50Qj+9e55Effr5ZgrFBZPT7RgexxjtSUtRiC7jdq:FFgI06w24NpdUQpgffVerNPPRfxh0Utw","tlshash":"9e2302eafe5ca64491d5d80e23a8852a86a00941e7cb78e9797f04532e03e1af53d5bc","first_seen":"2024-08-20T12:22:15.703907Z","last_seen":"2026-06-29T08:40:56.218073Z","times_seen":162,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d5e085d74b51b","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-hyperlendfi.live/","date":"2026-06-28T14:26:35.176Z","timestamp":1782656795176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12d5e085d74b51b HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/?__cf_chl_rt_tk=M5aqqcA7X8O2DOIsnOtmH7BlGXLDstREvPct6fqwoVg-1782656794-1.0.1.1-9GSnxJ1giZgYIL5wxeyFd_COGL6QyZtvRKhqWig5dfA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12d5e09dd8db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220089,"size_decoded":80484,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"efdab5154b8f5fd13a0e05eb99bc20b5","sha1":"d14129f87461cdc8e7f2615aaa03be743a8078a2","sha256":"dc7aa3443d6f1be935bb94361c1cd7ec954d5e3e1cb20586eac7c3223efaf7d1","sha512":"1fd46df07b2e417d09d183d1432891e10a1aad5e16cbc2f5eb8160db68cb52e6bfa2e896297cb882ca935207d90046176217e2bdcc79f009a2b6951307263c97","ssdeep":"3072:hNSyvFUuHny/rshxN/k0rExnAoP0rNNUz4CZDhyk:hNSyvFUuHn1hvs0w1P0RO5DYk","tlshash":"0b240a8dbac6750b029f9839c13b344db36b4c80401859a9eae1d2f13fd179775bb6e8","first_seen":"2026-06-28T14:27:28.097918Z","last_seen":"2026-06-28T14:27:28.097918Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:26:35.692Z","timestamp":1782656795692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12d5e0d7a5556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"fb6929eb5977fb6f8c1ec07174d6f224","sha1":"c44a830a78439e0fd362eeada6391eaa35afb875","sha256":"564af8332961865371595d3a442d7b7c58092c9557780fbf5a811d9c5dad62cb","sha512":"0c70ce26df8d376f87606b635086cd6286714464eedd5dd208225387abf18dba2ca775775d6243ac309aab643878fd324361dfa3a7d000d3677ddae9384fe88a","ssdeep":"","tlshash":"cba012c66181ad26c1490232c1600130f9301246110302340083d9120511e04c6a5902","first_seen":"2026-06-24T11:18:10.59533Z","last_seen":"2026-06-30T06:12:42.504832Z","times_seen":34,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a12d5e0c795b56c3/1782656795978/6jj3SPP5QOXcqFW","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:26:36.481Z","timestamp":1782656796481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a12d5e0c795b56c3/1782656795978/6jj3SPP5QOXcqFW HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:26:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 408\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12d5e120f0056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":628,"mime_type":"image/png","magic":"PNG image data, 81 x 4, 8-bit grayscale, non-interlaced","md5":"494f7c3c0a5cb2d51bdcc50ac3303769","sha1":"4be9c5ca7196a1ff6756a4cea34cc93d7dfb0bac","sha256":"286c53d023d5358037816796ca29a34ec0ddae5549787651add336bcc1c469e2","sha512":"814bd5227efe696deee018db5b75286c6b2dae06a4c629c6de1df734d0cece718c608a57efbc4ebbc647dc7bfc755559894517473ee232f3255d18507bea0e03","ssdeep":"","tlshash":"2be012e6e3539c68cd91213613219040d423030990011b0c000784320e4284889c8213","first_seen":"2026-06-28T14:27:28.106714Z","last_seen":"2026-06-28T14:27:28.106714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T14:26:42.063Z","timestamp":1782656802063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/ HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/?__cf_chl_tk=M5aqqcA7X8O2DOIsnOtmH7BlGXLDstREvPct6fqwoVg-1782656794-1.0.1.1-9GSnxJ1giZgYIL5wxeyFd_COGL6QyZtvRKhqWig5dfA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 18:28:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unSvVMDNtZ4gFvTDRf3xkSgjSjSDoRmw88q6aBT4%2BwFy1GsePq0HN0GrH87LqF6wda3O4U9DvG%2BTAMPHsRnfXFFT5oRYgopDYCmzl%2F%2B8%2FmH1%2B6E9WfVC0J%2Fwrz%2F6VMet43dacbkLfisa\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e34ef80b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112569,"size_decoded":24686,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (426)","md5":"9f97dc8a1c86deba2b5a4b535fe20efb","sha1":"0277828643079a9756eec1f7f4ba74e21956a621","sha256":"104822e20bb62a9bdb9c22cb5aeae1b920b41fe45b6cee7298bfe058a8587740","sha512":"88edd3c104f2adf47ed92956307e4bf3e79546bf9819afaa389a28330683b50c636f90b62c6c1d79372a1c58608aa5e854213f34888a2770e6943d9fdc20aee3","ssdeep":"1536:H0txluWyXcLo+TVr5Mf2SJ/fYuSTEnhv8CIcuvzoCWa:H0n8YuSTEnPJa","tlshash":"1eb33d91b76201345c2f836ebbebdb1b62319043e906ec1df5ed0448df899e8a96374d","first_seen":"2026-06-28T11:40:58.543533Z","last_seen":"2026-06-28T14:40:33.843642Z","times_seen":26,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/afd72e0175be5fd7.css","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.387Z","timestamp":1782656802387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/afd72e0175be5fd7.css HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-2988\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bi6XYH6aP0ziHH%2BxPoPc89QCs4IWh26WNqXKQgeRm0%2Bt47BX0%2Flo5vVLSaDrpdilXBsXVGEL2d89f8eVqhqaZpwkNR8QLJFp%2FxhFiQJDfFTvx3EIZTtDs8RaCR8iuLRBUGZVVqX8AbWQ\"}]}\r\nage: 2594\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e36ff93b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10632,"size_decoded":1464,"mime_type":"text/css","magic":"ASCII text, with very long lines (10632), with no line terminators","md5":"ae78876e3e0cc8e2db7b2047ef64b22c","sha1":"67f605ffd0bd4fe3ae8484db97d200ca288fb034","sha256":"a25794a8f56e3591ce2751d8fccb2543fc21efd1639570e498a1c65029a34951","sha512":"27dd70b313f57011896380d5640dbecfbef634e95c9873f65a789817d4ebc3ed420f16946ce7da6666f1cb4713380981be9d877cfa0b60e3168b2223c9e63a16","ssdeep":"192:+L8xbYvx6YkxdYZxEYGx3YLxuYQxZYyUxipDJYSxTY8y:+L2s5D+ej9woVX6ayuipDKMk1","tlshash":"c62266344039905ec975fcd231cebf133d7c941945d88922aa2c966a8fdbc6b72e1f68","first_seen":"2026-06-28T11:40:58.547582Z","last_seen":"2026-06-28T14:40:33.816481Z","times_seen":26,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_6.html","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.906Z","timestamp":1782656802906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/index_6.html HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0GAyfE7tPES4D2JrdR%2B82c%2B4k10dHND3oA08aHwqm5dRETX8uGrjT3h0jFpNI5dIYLkgJFkEhnQrAQWO6lDK5JwPo%2BsSenEcPwi2oxIFKGT6SDLSeNGPb5oVNxytFXIRVDvQHGSdnrh\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3a3facb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1154,"size_decoded":1332,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1153), with no line terminators","md5":"3ce41be93748333fcf2fbecaf76f63d2","sha1":"6b1b44de5cfc21908bbb8dcf2a00ebf6ce182e47","sha256":"2c164277570b74cb2d00ec3334484997a7737c38cb892f55f1b2a93226430332","sha512":"4faedbd0e6fdf4edaf60f907153b647697457bd61271a6a4f8851747f6b1611b0ee8221c2a4e8386f0309f6ca9564c11d6b10eb4da647109a889c81b614854f3","ssdeep":"","tlshash":"9b2196e668119d29601767ed9cca604eb903fa2de7445cccfdced81ddcb6d3c1141888","first_seen":"2026-06-28T11:40:58.549442Z","last_seen":"2026-06-28T14:40:33.811031Z","times_seen":18,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T14:26:34.837Z","timestamp":1782656794837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-QeiGLSHWluOTqOTAjl2HNe' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12d5e085d74b51b\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yalr7zqeJ%2BzLJDo4mi4YfrqhYrn47M77x4fSLV%2B36Z%2FjRYk%2FcPE1wQwiKj0TvT9Sqtd19KwDMYjz0aagdhy0IYjSskPnVvnObuDuStevW%2Fop%2F6fAPE%2B7%2F2JyjpSd%2BSCUXbaGlSt1fc%2F%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 14:26:34 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e085d74b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5583,"size_decoded":5573,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5583), with no line terminators","md5":"780fdca57bfece665bf96ab0a24a0528","sha1":"50b21af1c8981ef29c09650acbd176995b0b7444","sha256":"378f1b28809c6b566fb3b7fcda14bb3b7f2f9ed03c0fa34ba74755fb32d2a484","sha512":"1445fb4d18c0b18e0f14f6a497be7872c13e90efaece1b9ef5baa31a24ffeb0ba6de9018b680b6ca62e563cce98eddd1ac3ef5b4c882910706a20e389bd3f61f","ssdeep":"96:PNylotoXZzIEb0EaW87SH+uHOvOvJCc12UxtOKMG+Le/CYzueh8Nvzmw:PNjtkCB2+2OvOvJCcwUxtWGB/PyTvyw","tlshash":"00b13bf3a934802797f17f9220b7738d52326646bf0165a6e5a4896dc3edf8e801c185","first_seen":"2026-06-28T14:27:28.112887Z","last_seen":"2026-06-28T14:27:28.112887Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":74,"connect":20,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a12d5e0c795b56c3/1782656795978/6d27d1b194675bb71513eeb326a4a9aa74812b92a61d0669fee09c924d5fcae7/NLSGsP-RPRHjOn9","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:26:36.379Z","timestamp":1782656796379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a12d5e0c795b56c3/1782656795978/6d27d1b194675bb71513eeb326a4a9aa74812b92a61d0669fee09c924d5fcae7/NLSGsP-RPRHjOn9 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sun, 28 Jun 2026 14:26:36 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gbSfRsZRnW7cVE-6zJqSpqnSBK5KmHQZp_uCckk1fyucAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxDKbk4RYZyL6XnTRyMLN4wCsxvmJhd3ftOd8yAXrz8VqFgtlvnKMefvXRO4zaElaSrpOMszh8KAW9Dsx69eFsAosPK4nvwsvfiyP6ZyhdxPLGuhjTi9yUrWzzkcXpKUD5oZ63WixlXmHZg-DGy34XBTBEDLpaBfa5nJjJuMdHFzFB3XZ4lKatFdK8sSGfXMAsUy10RQd9wnzBzarw_8QPnkBlqzJ4ZJmbO7eJ3Jx6rUKm0EsteVSMi1W_3UgNTuDSFntFLT7ivnApWTXp1kSxFIe5bwCn-1tnm7qDWHa8Q6WW3qloT-zXcLq1G6N4vNlnIldiS3oejrM7UI5IuMAFwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIG0n0bGUZ1u3FRPusyakqap0gSuSph0Gaf7gnJJNX8rnABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIG0n0bGUZ1u3FRPusyakqap0gSuSph0Gaf7gnJJNX8rnABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a12d5e115e5556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T06:27:58.801285Z","times_seen":472702,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/jquery-3.6.0.min.js","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.396Z","timestamp":1782656802396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/jquery-3.6.0.min.js HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3ebdd5-15d9d\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mC5ZCXkcK8e78LRrEpLLiTixpCzFjiLF5P3AU%2FapPrifWVi623UDo0c56sc3pCj4dkTJblIbXLGzRw%2FCRAuCmtdfhGYIQssTpf936LtalVgOGarJ4LMkvaRx%2FORvM0x1MNHUHXcqJeM7\"}]}\r\nage: 2594\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e370f95b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":33555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-30T06:31:47.946307Z","times_seen":485824,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_4.html#frame=challenge\u0026id=0029igjkfuc6c\u0026host=app.ventuals.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=nl\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=b9fc5a50-2e5c-457a-9582-80ce342c2534\u0026size=invisible\u0026theme=light\u0026origin=https%3A%2F%2Fapp.ventuals.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22nl-NL%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.915Z","timestamp":1782656802915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/index_4.html HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7AF0Xr4HpGoeNT5AfNo8K%2ByOJW1Dm0H6TguaKSpwtLw744EygR8k4scjp73Ft4Yuq3SD9cZff%2FmBZ2RBXzfXKusSs%2BD%2BD9tZD5PeCJ6rUVxi6zYEdvv0ivr9rsuq4oPnqiiyVthUImkk\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3a4fb0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58993,"size_decoded":4449,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57323)","md5":"475266804dca308501f6d5deac63b37b","sha1":"caae8885dbb54b4e91b392700531767379a0b84c","sha256":"509749b824122e03ed89e61442492df27be79b18db92359247c22246db6d3332","sha512":"3c90cd3ff2b443120184e353d48fdec77843af6bfaba2d6d38a7af7d61cd077c4a4d5c9f5a2e8915577801a0ed95ca4c41f487d1596b869d1896c4ad26059e56","ssdeep":"192:7fIIINkNHCB4a1NCSXfvXfFqgaL36Xjb6XNb6XYb6Xrb6Xgb6XRb6XUb6Xrb6XvQ:3a1NhqgavSyjxK","tlshash":"6b43152196050427b177b798b4f18bcf276b8309f55342389be92a92e1cfcb45c9b747","first_seen":"2026-06-28T11:40:58.550298Z","last_seen":"2026-06-28T14:40:33.821756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/","date":"2026-06-28T14:26:35.593Z","timestamp":1782656795593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-s3uJXmivPzgcniW7q7rNaK' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d5e0c795b56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: rl6srlux;dur=252639, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252639,"size_decoded":98409,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"20faed08f748d3e5ef12f590059972a5","sha1":"bec228a4fb44b251f13f2bb363eb1a528e01344a","sha256":"ce66fcb80383e9b2a10d90c3f8db29f07012352660b2e435e6da2530d796461e","sha512":"a2fe689f711f7e95d84d413e2b031763389e9a61fb1d579d8cf1b7800a14a5e91327217c7547565fb6f69f55793148eed1c6e353e8b2329e1f4133292d07beba","ssdeep":"3072:7a9LzQoXi6Eb2AXchKJJWw5Nu2BCAAYqEgFZn4WaKsOeosnnazWBVCzf2WpH:7MLJWPew5Nu2MA7qEgfRsmyazbH","tlshash":"f0340989bbc3b00b121a557d8037309db22bdc44602c0969e7d19df43be6799b5fa9f8","first_seen":"2026-06-28T14:27:28.117956Z","last_seen":"2026-06-28T14:27:28.117956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d5e0c795b56c3/h_5QO6HVrmGlR.iNpy5CoINfZkNPBkjKqbNXdV3E.DE-1782656795-1.2.1.1-ZFi0XUrwpThFSDa2Y03H_XnnEIqeYiGtm2GFc0j6s54dGLvgOh3eFtvBxi6D_RqP","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:26:35.972Z","timestamp":1782656795972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d5e0c795b56c3/h_5QO6HVrmGlR.iNpy5CoINfZkNPBkjKqbNXdV3E.DE-1782656795-1.2.1.1-ZFi0XUrwpThFSDa2Y03H_XnnEIqeYiGtm2GFc0j6s54dGLvgOh3eFtvBxi6D_RqP HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: h_5QO6HVrmGlR.iNpy5CoINfZkNPBkjKqbNXdV3E.DE-1782656795-1.2.1.1-ZFi0XUrwpThFSDa2Y03H_XnnEIqeYiGtm2GFc0j6s54dGLvgOh3eFtvBxi6D_RqP\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4674\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:26:36 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$Cr7wCzfAGixkeC3PKXgyZA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d5e0edbc156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383616,"size_decoded":288477,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"60c9cf26b720c8a25faf09461d1e56b1","sha1":"482bf1c9ed29aa6f9d5b2d1fa91858bad1cd3806","sha256":"bbf9763ca8f2d89c9f3e2d0a940e6a52ee9545958521a166c3adc29491dfbd5d","sha512":"040771664471e9c8c47ed658da95c35f58440d7cede194e628fee0c4b332f05e188914ea410fba1721903fbf10601e690b9a87f073e81187e768c319f44957b9","ssdeep":"6144:nCguKZruEUJTK0kLix8YbLV6mbukw3d6KraOrWhNatzhpKmwtp:nCgXZQRujYXV6vkCfu1a5bKJtp","tlshash":"5c8422d75fbf6316878a5e2cd91c6c5e0e87cec7087000e6bae83a1b561ec4f9538529","first_seen":"2026-06-28T14:27:28.11982Z","last_seen":"2026-06-28T14:27:28.11982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/499890bf53c59576.css","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-hyperlendfi.live/php321/index_6.html","date":"2026-06-28T14:26:43.078Z","timestamp":1782656803078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/499890bf53c59576.css HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/index_6.html\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:43 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-1c369\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TlEhOWcz21XCtp2laAnwswLRaxEiPsDHlmoQQCYCjOv6TIu6OOpRJ0uIPNC1GMqGROkySnUiIS630WdEgA3FbZG75u7pTlQY8nY8DUnduoPS3hX4tiGjSRp%2BWNwLHWsLpXmNeJ%2FZ%2FDj\"}]}\r\nage: 2593\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3b3fbdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115561,"size_decoded":22213,"mime_type":"text/css","magic":"ASCII text, with very long lines (59489)","md5":"1d2473113bcf24d1ad767c708a597aee","sha1":"0810429795005e8afe81c9461e4a40a0d86c2bac","sha256":"a6ee82d3c921a9c43f54c269baee410f45bfd57318c1d16a4b79131397a217fc","sha512":"936d2204ac17b15017af56df8953f1745fe03a6aebdd24f39e2f9699a11a25a67e0040f261440a084d4d82732d0d1012aa1e9de583c755693fa20d45bff96377","ssdeep":"3072:QGlhfV+2t5ZeYCmUD8VN4ZUT2MztqhjrSWxDhbYZlvBzFY:QGlhfV+2t5ZexmUoptqhjrSWxDhbYZl4","tlshash":"7db3821df612113f3c2780f9d29cedada116b1c0ee296be6be4261118ac67f75de3214","first_seen":"2026-06-23T11:34:46.60726Z","last_seen":"2026-06-28T14:40:33.823406Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/favicon.ico","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-hyperlendfi.live/","date":"2026-06-28T14:26:35.537Z","timestamp":1782656795537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KntXxNEcwptP0gE3xQaNpepOsumB65S1JhyTZAYHePR3ZCiA8FDqFnsrWhEfSvhvll8zAim47eDsalG7wpXZ0KOxkdrzLW8n%2Fxys72cwbDhdBK0BpnIGck%2FE2Vb5fhM59EByffJejhCl\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12d5e0c1dadb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":752,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-30T04:25:59.770866Z","times_seen":45798,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d5e0c795b56c3/h_5QO6HVrmGlR.iNpy5CoINfZkNPBkjKqbNXdV3E.DE-1782656795-1.2.1.1-ZFi0XUrwpThFSDa2Y03H_XnnEIqeYiGtm2GFc0j6s54dGLvgOh3eFtvBxi6D_RqP","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T14:26:37.482Z","timestamp":1782656797482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2020341019:1782655223:SMUFrKWSxS4nhBLMxqT6a4cAETMlOQVLBVeqagoDoD4/a12d5e0c795b56c3/h_5QO6HVrmGlR.iNpy5CoINfZkNPBkjKqbNXdV3E.DE-1782656795-1.2.1.1-ZFi0XUrwpThFSDa2Y03H_XnnEIqeYiGtm2GFc0j6s54dGLvgOh3eFtvBxi6D_RqP HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/w41lg/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: h_5QO6HVrmGlR.iNpy5CoINfZkNPBkjKqbNXdV3E.DE-1782656795-1.2.1.1-ZFi0XUrwpThFSDa2Y03H_XnnEIqeYiGtm2GFc0j6s54dGLvgOh3eFtvBxi6D_RqP\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 88172\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:26:37 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: da3dcwJjTMVEhXiW2cMPumrvu6vq3iCmNpitRSt6uxixigVKTkPLPtT5QJVgXip6$4+0rbQDU9wv6ACz7oP5MBw==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d5e184d9756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34376,"size_decoded":26269,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34376), with no line terminators","md5":"5411a31c305109e7da67a0504d1da610","sha1":"0bf2144681dec94d44996088b175bee06a3c796d","sha256":"2690e868ca99a754f91cca3ef86818c8b3171f794760cd8de70864a55da480ec","sha512":"973c4b869d9800b0651c154700ef44bc21f3ce3d6debdf28722a6114a2626a03e0477f90b4afc3eabf376ba048b2867a97014752a6e9a38b15997b4fb4956a3d","ssdeep":"768:nf+uinoeMnPve1SNgVmd/s2SikjQWtER9GIW2h2m:n/Vn4aNtSikMWtX72h2m","tlshash":"56f2f1cabee3e91f8c96b687281f941d572aa5c358b274c48c41c0ced20ecb5a735f19","first_seen":"2026-06-28T14:27:28.124815Z","last_seen":"2026-06-28T14:27:28.124815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/36aaf9d54bb7f7f2.css","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.384Z","timestamp":1782656802384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/36aaf9d54bb7f7f2.css HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-43a23\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YgOYyIEiY%2BiDQxgiD25uJEgWqCtwx3AxrtnxhzXTraTIl6%2F6jkLUyJrpvHQtMTweQA7nGDnZEKIsQvREh06uU17wKE7LHL61nhaPVuGVAyuC4PNP%2FWKth0fl4WZHp17ED%2B20u%2FNa9xED\"}]}\r\nage: 2594\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e36ef92b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277027,"size_decoded":26426,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5543576d42cdc767956cf564b763a478","sha1":"737bea776195fdf18c13507dcd6cba6c15d24caa","sha256":"cf20035842054bb3a6f800ccca4c5ec2615dfe7cc4570e5ecb214678c02dff80","sha512":"9936879b38065a850081b360196dbb75fe9e36e90261044a59c2cd0d2a16e6ed963830cd97445fd6f9d0efa433f95ea385fb09ea94934c36be360ea1a491ef94","ssdeep":"768:hy73l5ovja43GIP+1ey9ktRLD8QbVBiy/LDqsgCSMV3Z7eQNJ2o+jzEi8JFbX11r:8F199yHnbkiiAMrYPV6rMrjmkB84t","tlshash":"da4400d5bd6cff3e693b647d36c4849c8d8778a2cc40879fe82530de19d979820a364a","first_seen":"2026-06-28T11:40:58.538508Z","last_seen":"2026-06-29T08:40:56.25405Z","times_seen":29,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_5.html#frame=challenge\u0026id=1ytseeyraftf\u0026host=app.ventuals.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=nl\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=b9fc5a50-2e5c-457a-9582-80ce342c2534\u0026size=invisible\u0026theme=light\u0026origin=https%3A%2F%2Fapp.ventuals.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22nl-NL%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.917Z","timestamp":1782656802917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/index_5.html HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:43 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kIraChW%2BSCJxslo1PikP%2FeeuLOx59kLhrPoIxJBSSa%2FdT%2BucZ1vz1hrL90MvpyGhb0972jpev8ftuj1sHEvSut87WfOi34xuNDEXLtledwc2Ps%2BL2HR1oK3PC7aJNR4lCYtfgAcTxlTy\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3a4fb1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58819,"size_decoded":4404,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57149)","md5":"c84e80dcfe74cdead2eaa3ac9f22e6dd","sha1":"11c93b82c37de2cf60309cfbd868efc75926f4ca","sha256":"e6abf44017163a42cc9c15e744151e3b4edaf874fecfd36165ed31fdac70a89b","sha512":"d4692f96fe736664677b365215a0582f1ed2776c632286755c6ec41a72dc7bb700a24810a53b0d4b6250d7fef57ddcbda9b62687dce1beca210864eade6940b1","ssdeep":"192:7fIIINkNHCB4a1NClXfvXfFqgVL36Xjb6XNb6XYb6Xrb6Xgb6XRb6XUb6Xrb6Xv0:3a1NiqgVvSyo","tlshash":"a243142156050427b177b7d8b4f18bcf276b8309f55342389ae92a92e1cfdb49c9b743","first_seen":"2026-06-28T11:40:58.544353Z","last_seen":"2026-06-28T14:40:33.848211Z","times_seen":18,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/icon.png","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.993Z","timestamp":1782656802993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/icon.png HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:43 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3ebdd5-3e7\"\r\naccept-ranges: bytes\r\nage: 2593\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MfXhnQG5FD1S%2BZ9J06YpLe4ZJSBIA9lwcgMk1zygz7t9YespDIuj%2F4FFXjWJLs%2FuZWcLmmBIyhLO47y6MGUSVpQCkzZMYrQNW9TcTudv9mbX6eVjp47BtswnxKW767uQTiifmwKkOoqn\"}]}\r\ncontent-length: 999\r\ncf-ray: a12d5e3abfb8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999,"size_decoded":1704,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6084fc0b73be92e3b11876ef4f2ca572","sha1":"e53c7021fa258e1f6a4dc8cf06602c9f6274797b","sha256":"4470a5db41cdaf60c2ea41ba0231b1abbdc290cc694b0f2d29337738e5be43a7","sha512":"5d9b3237f2b658e172d299a32917a8afc848c2ee48d3490b779b593a01ffba9dc594810f5a491c237bc28b3df23ece5e229a4aff979d0b69e17be0b23c8d35b2","ssdeep":"","tlshash":"cd11a86a990a6d74515d1523e72b4c60dcbb2cdadfd08c58285124e247f7864d5f0e8a","first_seen":"2025-08-12T04:00:02.530534Z","last_seen":"2026-06-29T08:40:56.115107Z","times_seen":24,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-hyperlendfi.live/","date":"2026-06-28T14:26:35.508Z","timestamp":1782656795508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://event-hyperlendfi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://event-hyperlendfi.live\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12d5e0c08a2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22108,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T06:38:54.919543Z","times_seen":9711,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T14:26:41.903Z","timestamp":1782656801903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/?__cf_chl_tk=M5aqqcA7X8O2DOIsnOtmH7BlGXLDstREvPct6fqwoVg-1782656794-1.0.1.1-9GSnxJ1giZgYIL5wxeyFd_COGL6QyZtvRKhqWig5dfA\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://event-hyperlendfi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://event-hyperlendfi.live/php321/\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZrcbL4%2BQM2JRbaNn3%2B0jA7M8ofJbt78sEuipPOEuX%2BzkCcvSKn77K%2BQ32uNvo%2BhZkCXl1TtH7qSftkUXqXyIID6Rq7uzBislAv5aKeReXcvvydhDX0y3S8EyjhaEBjmUOqu%2BtGYNrQH\"}]}\r\ncf-ray: a12d5e33ef75b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T06:32:23.418387Z","times_seen":16848511,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/2aad71242bff6512.css","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.390Z","timestamp":1782656802390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/2aad71242bff6512.css HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-53e\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWnd7I0Ctb95%2BIWyyXyqK4VRquVmcWiZbAv1gTSW67HraSyBYkVHln%2FDbKGNlkaAUiaEIsklmNX3u9Ke8C0arHvgNe0ueWfzS5MZ4LcL4oND4B%2FKgeTjdd7LNkz6w%2FhhVH91gy5bFpJb\"}]}\r\nage: 2594\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e36ff94b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":1149,"mime_type":"text/css","magic":"ASCII text, with very long lines (1342), with no line terminators","md5":"bcb0d1da74630c7bacedf3a75d8ea18b","sha1":"04cd42e37538f4f45e16385ed48fc62df29c11da","sha256":"50f8cb7242f9ceeb2a7963187eade77b11f2974c73244e9bd8c607edd800a87a","sha512":"d4149fa76b2cf63562cf10fd59c2f12faecb6d9aff425313552097b28af8b0db6e57a42a69be3d9b608ece12e1a329ade67e3de3ceeece22ffd4dfef7d9199b2","ssdeep":"","tlshash":"022150200a1d999de670bdc237853f631d6d64148ea91d32f32702698dd787a32a17bc","first_seen":"2026-06-28T11:40:58.567103Z","last_seen":"2026-06-28T16:46:39.445195Z","times_seen":28,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"103.101.85.74.sslip.io/php321/30yid7.php?v=2","fqdn":"103.101.85.74.sslip.io","domain":"sslip.io","tld":"io"},"ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.393Z","timestamp":1782656802393,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"103.101.85.74.sslip.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 17:00:26 GMT","end":"Thu, 24 Sep 2026 17:00:25 GMT"},"fingerprint":{"sha1":"57:1E:10:1D:AA:83:E0:46:F8:9C:74:53:C1:5B:83:E2:15:40:71:F3","sha256":"E8:0B:E0:EC:D6:B8:A4:AF:5F:70:8D:D8:6E:D8:01:DD:9F:5B:E1:DC:7E:45:3F:8B:C4:E9:B1:CE:99:E7:C6:5D"}}},"request":{"raw":"GET /php321/30yid7.php?v=2 HTTP/1.1\r\nHost: 103.101.85.74.sslip.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jun 2026 14:26:42 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":201528,"size_decoded":201870,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53594), with no line terminators","md5":"da75354e559665e0d031ceea0c85be77","sha1":"985c6175d97e4ce1dfc3267c15b0e304091bac0b","sha256":"d2c934ee5268f10f6d3ebed66264b8587307eefcc3134258f61bb866cb9521a5","sha512":"e3df3c2b79155cdbe5f42661bfdb7dc8cd54b9dc069716d939d6a52dca04e383b7d1354184f72ac3b4c41af9db4d7d9d3e60e92dfe8649c2751ef12f0074a393","ssdeep":"1536:Fb/Lkk8GpefuIRSLQOT1oF7LnHoCTEmO/bPE2gb3S2Zk9L:n8GpefuGSL1T1oFTgr/QHAF","tlshash":"90147496db4781dc8ea9118fd1b2f944d5054d128dacbc93ee1edec2611af7680c32af","first_seen":"2026-06-28T13:56:46.206212Z","last_seen":"2026-06-28T14:40:33.832031Z","times_seen":6,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":20,"connect":54,"send":0,"wait":85,"receive":130,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/logo-green.png","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.402Z","timestamp":1782656802402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/logo-green.png HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=5,i\r\netag: \"6a3ebdd5-2036\"\r\naccept-ranges: bytes\r\nage: 2594\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3p9Zpr8dZgnoGizBdpIyPqhKijEcGuWXDQ%2FhqkxDVX9eOAos157IbMSWJ4sl7NNzEJcFCc6HL8WQsM1pjO7ygzY%2FpYdNWaDBXhedZmNUBEY9T94hQRz8aEus8gyJlONmcpVqxj7FHYC\"}]}\r\ncontent-length: 8246\r\ncf-ray: a12d5e371f96b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8246,"size_decoded":8948,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"f683473cd3748b66166f54b380398889","sha1":"118bf80d840b7e1665fea0abc0fb9dac02590d03","sha256":"bfd22ad3169b22a3b4c9cf99f25534f639249156186695e879e6d801ca70bcfc","sha512":"513ff0738ecf4f478aa6ed0aa0d467d1028927a73e9a79be5c7fc90e338239a490693e26fd5ed3ff00d5092ea69ecc9f31f3977783b929670f0e44160235ab18","ssdeep":"192:sSlyZ+/dNKRPMbuk8PVBsIN7sbdxvfCAFWFX0/uGQk:rgZ+qR+fBlbTCAF60/BL","tlshash":"02024bf07f15a7a7762fc3d2921c5e7b307013dd8a922635d296ae92383350c57ac169","first_seen":"2025-08-12T04:00:02.439458Z","last_seen":"2026-06-29T08:40:56.246432Z","times_seen":30,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/favicon.ico","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-hyperlendfi.live/","date":"2026-06-28T14:26:35.209Z","timestamp":1782656795209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/?__cf_chl_rt_tk=M5aqqcA7X8O2DOIsnOtmH7BlGXLDstREvPct6fqwoVg-1782656794-1.0.1.1-9GSnxJ1giZgYIL5wxeyFd_COGL6QyZtvRKhqWig5dfA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bn8gxUk2O2RyDxkx6OtO900v61cnQObBh5Ptg8KYvqsIDO7CMCQ7jUGgdgPCjhyTBDX%2BPr0CYn0IdkTCkrd5Ezyhz1xArOeN%2B9%2Bv6h8UUj%2FbwHDvHtkdRd6atcCLu%2Fw08KL0oqYkq91r\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12d5e0a0d8fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":759,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-30T04:25:59.770866Z","times_seen":45798,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/cdn-cgi/challenge-platform/h/b/flow/ov1/1015241652:1782655217:BDoIfuCLMA3vN_I2p3sebVecucItY_iSLrMOhwYZTQ4/a12d5e085d74b51b/On1_65VNQvyz8FNI2hJrCWTEJxnvgBRYDJN4x5VEdnk-1782656794-1.2.1.1-PJFNijnRXW5T8y6yZkD39OwZj.0AZG0bLBqQ2fisBOqPV2SAtdpXITKsn_umlB0m","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://event-hyperlendfi.live/","date":"2026-06-28T14:26:35.532Z","timestamp":1782656795532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1015241652:1782655217:BDoIfuCLMA3vN_I2p3sebVecucItY_iSLrMOhwYZTQ4/a12d5e085d74b51b/On1_65VNQvyz8FNI2hJrCWTEJxnvgBRYDJN4x5VEdnk-1782656794-1.2.1.1-PJFNijnRXW5T8y6yZkD39OwZj.0AZG0bLBqQ2fisBOqPV2SAtdpXITKsn_umlB0m HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/\r\ncf-chl: On1_65VNQvyz8FNI2hJrCWTEJxnvgBRYDJN4x5VEdnk-1782656794-1.2.1.1-PJFNijnRXW5T8y6yZkD39OwZj.0AZG0bLBqQ2fisBOqPV2SAtdpXITKsn_umlB0m\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2252\r\nOrigin: https://event-hyperlendfi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: JCQ+kBAylK1MA1wGV49d6cdAYngCVMt+l57kDx/0ySo=$4YtvFhoNu4K/w4C4p5lLfQ==\r\ntiming-allow-origin: https://event-hyperlendfi.live\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 14:26:35 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12d5e0c1dacb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19232,"size_decoded":14847,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19232), with no line terminators","md5":"124d691ff0e5bd4f1b3b1a78895a65d5","sha1":"e5f942f937f413a4877b7e08e6e6352e2f9fa817","sha256":"63ab7400c210a5fd02ba0ba195705056abbcddfc26964c6f517f586a5514565a","sha512":"ff1eb157e4673c887218c10409fb3481620d9a5db898fffbec43ec4570dac8fc400da86285fc2bfc05ac927d84adb5781d65dd1a8d1cb6bd53a0afe91cbbd1a7","ssdeep":"384:1yThGGDIp2lOuFbHFOP+kOt/hfA/Zn1t6Vl23OX1t94k9JrY:sT3DIp2lVbHFOmkAZ+ZnP6j23yZJc","tlshash":"df82e0962b17b774ad2d671ca44176b4e2243e088129f6e2cfdf369cc81dd6b180b4f9","first_seen":"2026-06-28T14:27:28.135312Z","last_seen":"2026-06-28T14:27:28.135312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_2.html#frame=checkbox-invisible","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.895Z","timestamp":1782656802895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/index_2.html HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDhs3xew%2BXZtp3DCS4%2BH6VjGdXnL6g%2FuXc4jZneD3MiJaaLhidzHyKZ0QdWyfJVvPRze2IQloWlrx5Tf2mof4UZ1eN1b45otVwqZr9Pp5n8ZN1%2FB1ceOYv7WbAXy0UoFJzvTY5gLAgcg\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3a1fa9b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":1371,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"a399f5b2e840515695ea858ea2889c0c","sha1":"ee0757febbab16679ab885d4b639a17f245c9cc5","sha256":"60d1e15d12311fb77e6406902c9f4c5db0f95c567189350d6a96881a5f8fc37d","sha512":"f8ca0b613615004617196c540feb96c16928d2a4bc200e428ff8beddd4a2ed0384e77ad627f9a0c31ce985c434ca6042d3d7b3149a10ecfb6b09087294d99e60","ssdeep":"","tlshash":"ff31e49a0d43119ad8978ade9ce47bb4540eeb979a030ec77161d1858b437ddf0f1b0b","first_seen":"2026-06-28T11:40:58.539539Z","last_seen":"2026-06-28T14:40:33.810202Z","times_seen":20,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/index_3.html#frame=checkbox-invisible","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.902Z","timestamp":1782656802902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/index_3.html HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfzcehBo3q9nQZnIvsPHQc%2Fl%2BySBJICfSfYF7uCCuBsX8OJ5eLCCsrFvojj3oT7bhcGOSRz4b4pPhnfHFbOp5g0z0jIyOT3JnqvnJnPGS0g5k%2FapYRG2ZGyIFcm1n%2Bej6j6oEVS8Oc%2Bp\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e3a2fabb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":1373,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"a399f5b2e840515695ea858ea2889c0c","sha1":"ee0757febbab16679ab885d4b639a17f245c9cc5","sha256":"60d1e15d12311fb77e6406902c9f4c5db0f95c567189350d6a96881a5f8fc37d","sha512":"f8ca0b613615004617196c540feb96c16928d2a4bc200e428ff8beddd4a2ed0384e77ad627f9a0c31ce985c434ca6042d3d7b3149a10ecfb6b09087294d99e60","ssdeep":"","tlshash":"ff31e49a0d43119ad8978ade9ce47bb4540eeb979a030ec77161d1858b437ddf0f1b0b","first_seen":"2026-06-28T11:40:58.539539Z","last_seen":"2026-06-28T14:40:33.810202Z","times_seen":20,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/7ab6c71e1cbd6ab6-s.p.woff2","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.965Z","timestamp":1782656802965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/7ab6c71e1cbd6ab6-s.p.woff2 HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/2aad71242bff6512.css\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3ebdd5-5950\"\r\naccept-ranges: bytes\r\nage: 2076\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8quT7BwwG9Q4VgjXBIFZ3IVbArV27nqyrD%2Fot5bMDZn8w3TKn75vtGQe2BuDgn%2BVy4rW7bxKhntLYDfXyBZpU0ziwKbz2TjALerEgW17kAer8ztklpiw0oNpS68Lk%2BdDoUUcNkn1Wri\"}]}\r\ncontent-length: 22864\r\ncf-ray: a12d5e3a8fb6b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22864,"size_decoded":23587,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22864, version 1.0","md5":"de829035f3ec3073c54513b5772508e4","sha1":"7d7e195aa612611de6ae0be2f88d635d578352b6","sha256":"bf215614cb18ef8c5eaf687ae21769b8ead7839ff4d7d2313de911c8d3725f3e","sha512":"cd23c9f2aa3ec59e6efa2d25912dd09926b7b5a46006ce9413126640af7e6337befe5d28f51bad822529467a52af1d3d4c5016714a92e03888a5763f798133ea","ssdeep":"384:msY0jOdY0gboC0hfNs3E3TEYXCVJfUproCeEC626z6Jko4vFDDlIg9Z:K0CuboC0FN0QPC3UhoCeEQMBdvFeg9Z","tlshash":"f4a2d0a66eab724768102373c5003cfe2b2d766a915da678977e44c4f8c346ed6423f4","first_seen":"2025-09-22T03:39:33.528899Z","last_seen":"2026-06-29T08:40:56.251715Z","times_seen":31,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"103.101.85.74.sslip.io/php321/30yid7.php?m=2971094","fqdn":"103.101.85.74.sslip.io","domain":"sslip.io","tld":"io"},"ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:43.049Z","timestamp":1782656803049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"103.101.85.74.sslip.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 17:00:26 GMT","end":"Thu, 24 Sep 2026 17:00:25 GMT"},"fingerprint":{"sha1":"57:1E:10:1D:AA:83:E0:46:F8:9C:74:53:C1:5B:83:E2:15:40:71:F3","sha256":"E8:0B:E0:EC:D6:B8:A4:AF:5F:70:8D:D8:6E:D8:01:DD:9F:5B:E1:DC:7E:45:3F:8B:C4:E9:B1:CE:99:E7:C6:5D"}}},"request":{"raw":"GET /php321/30yid7.php?m=2971094 HTTP/1.1\r\nHost: 103.101.85.74.sslip.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://event-hyperlendfi.live/\r\nOrigin: https://event-hyperlendfi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jun 2026 14:26:43 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3592811,"size_decoded":3593152,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d5bd92b04003d65f818d33b9b2c40dd4","sha1":"b17bbe73b9652b8aa2cddce7d3c99db9b4b6077a","sha256":"f96d64fa66d0d2a7d85db02a4fdc920da36b9d563d48b65277a22dc3d38494e8","sha512":"1c55291c23f4643dcb5a4f0282ef27e9cc902cccb28a6173f32dd292cf076de0d4c54cf728cecddb863a188c62416093511ef7c4fab4169b99554603ff2391fa","ssdeep":"24576:uIbz90IqNIQALUSOjrrZm9LPWB/x0uXwSY1P45U:uIffQctP4ZDXwX1P4e","tlshash":"752512d2e063a0d3372d1164a6e85dee4496c05e7b9d5275ae8cbfc460ea06387f8fc1","first_seen":"2026-06-28T13:07:47.930993Z","last_seen":"2026-06-28T14:40:33.822605Z","times_seen":10,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":43,"send":0,"wait":88,"receive":305,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-hyperlendfi.live/php321/92a85b6493699521.css","fqdn":"event-hyperlendfi.live","domain":"event-hyperlendfi.live","tld":"live"},"ip":{"addr":"104.21.86.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-hyperlendfi.live/php321/","date":"2026-06-28T14:26:42.382Z","timestamp":1782656802382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-hyperlendfi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Jun 2026 13:54:20 GMT","end":"Thu, 17 Sep 2026 14:52:55 GMT"},"fingerprint":{"sha1":"13:72:A5:FA:AD:35:65:6E:ED:76:59:F3:96:46:C3:50:67:6C:1E:F2","sha256":"FD:69:22:05:84:A1:EF:ED:9C:D6:FB:EB:6E:B5:57:C2:18:39:3E:2D:A6:68:5E:83:3D:95:6A:9C:EA:88:C3:0F"}}},"request":{"raw":"GET /php321/92a85b6493699521.css HTTP/1.1\r\nHost: event-hyperlendfi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://event-hyperlendfi.live/php321/\r\nCookie: cf_clearance=AZo8QjReH6uWdaYG84KG5r_VQMDscdyfyycWKiPthGQ-1782656801-1.2.1.1-Gfs.RLp1jWi2kvP37c1QZu9XJbR13.WcQO.oWI271kcI.X8INCT7ceLu.w1kPXupPxydeGboKDL3fl87WaNImsPHTvYqUVNeP_eeY2SpIohFb3f37wD3VRX6jR73Ms59iwuE6cE0HAFHTgo.aln.8NgVjrrXsPOrSKpoUd8DWrdiEHcxt_bJ8ELpmDTEIjQVFlwXPwRxmdcChpAKk_djQ3zJIULp1rZmrk9HnHRnhchVciANFS0TtjJ5xlV_GyGdCJhPKvEwICsYOVDwS6_mi8I.OxlsM0iJBKDuG6Eh40lfu5PilnJKc7CahX8gFFbhKyXEGqKwJYCiAXZ3bhEs4wERc3OERNKWm7vkqVraB4DaV74OTaA2vsskgtwJ7MknkS8FNPB93lBrpre211Bepo0uLzy0gp0SJOyz7suKhe7J3H4T75e0OXH7MF5eh9GvXd1svfTQ6.AXoJ4Rom9MbfpBCVmtszYqZvF1Vv_n.0NWWnQ.NvX3DiLBERiYVktW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 14:26:42 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-18ff5\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enJzmf76a1LQlTWzK7mIHBWsmxFUwaiwOJs8HOldhb0XGfoi0FFjSZaVm1n6vMcxQ8UB3Blcgp7Z3r0Qqt15Seen7SBVQsU3lV2j0mvtHWfZ47fN7WYZ%2BXurtjizuq9kHQliNg9Z6ApB\"}]}\r\nage: 2594\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12d5e36ef91b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102389,"size_decoded":19030,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c4952a7635291990fa4d443df055700","sha1":"945a2b359a378ecb36221e132f07155d540d0395","sha256":"9adbe32cd7a78a91139ee633efb279052c07ece396cf47940e721a1152b99146","sha512":"55df1d480cadfb6cb90cfe029397ec9a1e6445b33e0e3a4eaf91a00fe151b0357baf86ba0b90767c3690876fc853dd8369450028a83329acfc2ae3cb60f0367d","ssdeep":"3072:j+TIsqh5GMlcGWhVz1PHj48U/PmE+SBTai4:STIsqh5GMlcGWhVz1PHOuBSBTai4","tlshash":"8ea384a4f275d57bbc23b4bda3ecf81c611aa582de125be8ff52601112c7af31863614","first_seen":"2026-06-28T11:40:58.554295Z","last_seen":"2026-06-29T08:40:56.243825Z","times_seen":29,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"event-hyperlendfi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}