{"report_id":"ccdadb6e-290a-4263-a2a5-fc9e90264b0f","version":6,"status":"done","tags":[],"date":"2026-05-15T01:35:16Z","url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"172.67.199.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"title":"lo0p — borrow ETH without selling your tokens","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"172.67.199.234","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T01:35:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lo0p-io.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lo0p-io.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-15T01:15:03.115491Z","last_seen":"2026-05-15T01:15:03.115491Z","alert_count":3,"request_count":3,"received_data":3744322,"sent_data":1343,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"309adf6986628d62f3032057bcc5369d","sha1":"c2034342760a789d60f4e0338676a1e6223893c7","sha256":"c3f300b8ed71c3eaa68ba1be853db7ae42a08d9781c2cf022d25abde91a7b63b","sha512":"f468fe4b6687aa4999517004de7da912d3bf84ba2d006fd63336476db72f5d719083796362d6217633cc3a451fd8d8ee278b849aa1bbb4d5b01ace4aa7c3bf4f","ssdeep":"768:1eMAoNcOQr+2Z+2smHEQz770yXvEq1nE+uMa4NQDlDpVcGcIpjZocAj0ky67Xco8:Ed+2Z+2pHE8oFqNtbypR44M7KYjYpvd","tlshash":"c07393d55a1bd0d88e2220ded433e916e4680a63cdadf1a3e97cddc0b81df62848757b","size":73406,"data":"","first_seen":"2026-05-15T01:15:10.597546Z","last_seen":"2026-05-15T01:35:24.630555Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/a47b40ed-554b-449e-a3ea-e20d81c646e4","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"54bc2bf3998e30f0dc8b0d841be8c0ec","sha1":"36ba649eaba2a5ab43d1fea2322e85ead8adb38e","sha256":"eb41e00f0e2a329eacff29f3e46c7a16fdcc4254a78abdd3b0769456a38cacd1","sha512":"5f443abe09fc864ca883af20aa0b9e69e87c4c5b7b85baf56ab03ffd4f8d4bb5c83995d9f9ea6983237d35d7386a9e3e99a4b66f2ffc30c561461cac50738f22","ssdeep":"49152:vCGkwdNZngkO5DtpwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtU4:9","tlshash":"45f523d26d4399758f48461570eb1e0f68940c1368adf0fae7a4f8c234adfa181e7d6e","size":3424239,"data":"","first_seen":"2026-05-15T01:15:10.604668Z","last_seen":"2026-05-15T01:35:24.635133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"876569d4e649eb2f74f701b3087e5581","sha1":"2569d9470b3ba6117c094d1598825ccdbf49aea5","sha256":"824e65767aacb31ba856c8d87a54b8ab8bc016d4e10da16bc75d6a9f1d462742","sha512":"4eaa051811efaffbedbd15758591a65cbacc24324e20af45645c8bc8743bd67d1f01dc6572127b3b6966461ed61b740e6fe56418071d16bf02a1029d7fa0f661","ssdeep":"","tlshash":"64f0c82df2245b337cbdc47f647366df3eb3612dd2052460245bad0935b4d41aae4e05","size":638,"data":"","first_seen":"2024-08-25T23:33:17Z","last_seen":"2026-05-17T08:07:50.820217Z","times_seen":656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-05-17T11:52:00.633463Z","times_seen":2963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-05-17T11:52:00.632934Z","times_seen":2993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-05-17T06:02:08.602755Z","times_seen":2857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-05-17T06:02:08.604617Z","times_seen":2825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-05-17T06:02:08.60659Z","times_seen":1646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"698c874f015ee3101283108a74ee7f9f","sha1":"8ce83e16104fff4dd4362839da5812bae2f2c32d","sha256":"205415d4be47c063062e08cb026a4bf4e95450960a6976813f23f4e52b31f2a2","sha512":"482192e5f12e006ee2a9e340b6dba8420d81476e2986fa34eacaaa008f83aac6607ccdcf7380f22be3ec59ed0143ea41f527e4f9889a8ffa8bd73d506b2677d1","ssdeep":"49152:EsGkwdNZngkO5Dt/wW2QUSvhjG+EyY4bfO3xrQanJfCpszVtEK:a","tlshash":"65f523526d435976cf58435570db1e0f78980c1368ade0dae7e8f8c234aef9182e792e","size":3419746,"data":"","first_seen":"2026-05-15T01:15:10.601395Z","last_seen":"2026-05-15T01:35:24.646943Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-05-17T11:52:00.63134Z","times_seen":3030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/ant-alert-4.1.8.min.js","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aafbc115ba73ba0e57650d493835a647","sha1":"4a5c6aa89326ed830a16a6c7ab9154842e18f8d8","sha256":"b64bfe3a72bc65d3ea2eb4970b91a14d308900afc5018666bba0e12ff6f563d5","sha512":"a668aa897b02cf9924fdd83a401040daefc74e2b82cf59adc693ad2ecfdc9a4632ce09932e2479376f832dcdde946fb94a52c9200e804287ce256da729574d29","ssdeep":"768:CFgodcw0P+2Z+2udD+EyGuf2JUL4lSa2BOeiRxdrcGcIpjhOcm0SuIbcSxcJ0Mca:n+2Z+2udJofUdSa2PsxdbXc+2jYpvH","tlshash":"f973d6da194ad0d99d2520ced477f819e4a80a53ccacf093ea7cdcc6b41ef66844727b","size":76655,"data":"","first_seen":"2026-05-15T01:15:10.59441Z","last_seen":"2026-05-15T01:35:24.627215Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-05-17T06:02:08.603404Z","times_seen":2913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lo0p-io.live/","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T01:34:51.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lo0p-io.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 16:45:11 GMT","end":"Mon, 10 Aug 2026 16:45:10 GMT"},"fingerprint":{"sha1":"11:35:F0:85:B9:2C:2E:23:27:B6:E8:17:E6:9E:98:54:B8:15:DD:AB","sha256":"C2:0F:68:7A:16:0B:D2:EA:A9:71:8F:06:BC:72:01:98:E0:F3:08:52:E0:46:73:27:98:03:A7:9F:BC:D3:BC:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lo0p-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 May 2026 01:34:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 12 May 2026 17:51:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2F0b9vYfYT8mRGocNdTwi0XTXF4UJbgkCTqU355fKG5bas5OaP4QAC8LZqRMAl49N0hmKqyNomkoDrkttGnzTNHdBmQ2EByAjtXIsqRzqx%2FlUW5F9XZHVmhdfPUrxtg%3D\"}]}\r\nage: 1218\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9fbe67180c49b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240341,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"27c0ea9d777d8427668f36e36f862fed","sha1":"014368326b083428e233466390b882f1ec88f4e8","sha256":"350b30208603e50d3f7183544968bb4b4e9b9f42167f85d921b9dc533b129f0e","sha512":"0976d8f74839dee3c3c4e13d07851e14ca109976805b4db02f0e137737cca8048f5a8a9f423465357c45609adf39d7d405a5055af7a79695ca9562b470b65510","ssdeep":"3072:74PvG9LFzcOfNjT6vHBJR15WCf+AuT4tUVztXtXZB4:7430zcOfNkBJR15WCf+AuT4tUtt9XZW","tlshash":"60341a70e3616832ee574588e1dc7bb82c7964cbdd212ba0e22811bb7fcaefd3515944","first_seen":"2026-05-15T01:15:10.592591Z","last_seen":"2026-05-15T01:35:24.625904Z","times_seen":3,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":300,"dns":288,"connect":1,"send":0,"wait":16,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lo0p-io.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/ant-alert-4.1.8.min.js","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lo0p-io.live/","date":"2026-05-15T01:34:52.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lo0p-io.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 16:45:11 GMT","end":"Mon, 10 Aug 2026 16:45:10 GMT"},"fingerprint":{"sha1":"11:35:F0:85:B9:2C:2E:23:27:B6:E8:17:E6:9E:98:54:B8:15:DD:AB","sha256":"C2:0F:68:7A:16:0B:D2:EA:A9:71:8F:06:BC:72:01:98:E0:F3:08:52:E0:46:73:27:98:03:A7:9F:BC:D3:BC:76"}}},"request":{"raw":"GET /ant-alert-4.1.8.min.js HTTP/1.1\r\nHost: lo0p-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 May 2026 01:34:52 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 12 May 2026 17:51:19 GMT\r\netag: W/\"6a036897-12b6f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1218\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7E5JDWFwxNU8alAYlPYLG8Pl95Qdf0rqZXT8pfCLESUVfq6q3LbR9vuZFdLaq00oVKJeBIzES9iIeHswwKu0rzo%2B2rt3Dlwgs%2BdwSOfNFzKoL5dlDwVnvhhZY0imZs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbe6718fdf0b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"aafbc115ba73ba0e57650d493835a647","sha1":"4a5c6aa89326ed830a16a6c7ab9154842e18f8d8","sha256":"b64bfe3a72bc65d3ea2eb4970b91a14d308900afc5018666bba0e12ff6f563d5","sha512":"a668aa897b02cf9924fdd83a401040daefc74e2b82cf59adc693ad2ecfdc9a4632ce09932e2479376f832dcdde946fb94a52c9200e804287ce256da729574d29","ssdeep":"768:CFgodcw0P+2Z+2udD+EyGuf2JUL4lSa2BOeiRxdrcGcIpjhOcm0SuIbcSxcJ0Mca:n+2Z+2udJofUdSa2PsxdbXc+2jYpvH","tlshash":"f973d6da194ad0d99d2520ced477f819e4a80a53ccacf093ea7cdcc6b41ef66844727b","first_seen":"2026-05-15T01:15:10.59441Z","last_seen":"2026-05-15T01:35:24.627215Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lo0p-io.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lo0p-io.live/secureproxy?e=jscdn/getFile","fqdn":"lo0p-io.live","domain":"lo0p-io.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lo0p-io.live/","date":"2026-05-15T01:34:52.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lo0p-io.live","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 16:45:11 GMT","end":"Mon, 10 Aug 2026 16:45:10 GMT"},"fingerprint":{"sha1":"11:35:F0:85:B9:2C:2E:23:27:B6:E8:17:E6:9E:98:54:B8:15:DD:AB","sha256":"C2:0F:68:7A:16:0B:D2:EA:A9:71:8F:06:BC:72:01:98:E0:F3:08:52:E0:46:73:27:98:03:A7:9F:BC:D3:BC:76"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: lo0p-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://lo0p-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"nwv73j11x3xp5h15u09u\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 May 2026 01:34:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGS843EJR54uUdmV5s7%2BAn4qD5L3dPJWJy7Tp93eBBZrxbWdWwtOPYdXXUk%2FYwfgbAqnBOv%2FepP7bjBiBFDOMUpCJ9ToIXuTTvfEJ4WEhX7WZVo8zy%2BoVJPeuZAtByjAzEd6KAQ%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9fbe671b0e7ab509-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3424239,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6fc81051db613aa9df6e527d134397d6","sha1":"3538ec7964f22e86775b0829d50331d457e53f34","sha256":"edc45b5148753a3b7ad4c923f83e05a0c986982ada0c2f46b9edf456d43c2081","sha512":"89c44772b792d38130c8131c656ef5c82a5262477fc42f124b1a0bb82ff500e387693e6e49a9cd9ac09f9bc7fcd0e4bfe9812f28bb8194a1c1f811b18310070f","ssdeep":"24576:0yjsb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RpPK:vCGkwdNZngkO5g","tlshash":"462523e36f5794388f0c6e9970e71d0f38444c132489a5f6e6d9dcc631a977082eaa7e","first_seen":"2026-05-15T01:15:10.596031Z","last_seen":"2026-05-15T01:35:24.628747Z","times_seen":3,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-15","alert":"Sinkholed","trigger":"lo0p-io.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
