{"report_id":"d079d858-e537-455a-ab4a-b0a4390f8ce4","version":6,"status":"done","tags":[],"date":"2026-02-01T15:09:31Z","url":{"schema":"https","addr":"crypto-mining.store/","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"crypto-mining.store/auth","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"title":"CryptoMiner","dom":{"size":31969,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14777)","md5":"9c05d3bf22bd5ca5cd3ff2afeb47c454","sha1":"c14c3fa480b9f3de0d6779d2168df67e84660a94","sha256":"d85a9bb2b2d1d9dea8c8d4510949d6eea3d25041c5507114107d8c06adf2bae6","sha512":"dde716616b7f3030e1406423e466ab64ab16a732f88259c3cff2e084a4b73865092e08e468f2e7b181cc1a4cc00f77f7dae4bf1a3e1eea3f8d2aef1808e94363","ssdeep":"768:05RsR4TqMsnB7cxksc64Jysq7vGcmGH/bb2/BkaNmFy:oXx/c64Jysq7v8kgmY","tlshash":"d7e2fb41f10c133d6a2be658ffc8a35c5129b062eea24866b10d045ee6d3bf475abf54","dom_hash":"domhasha5ef2b537bc84aeb4bba303741051a06","first_seen":"2026-02-01T01:13:53.258403Z","last_seen":"2026-02-01T15:09:33.118773Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crypto-mining.store/","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T15:09:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"crypto-mining.store","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-11","domain_rank":0,"first_seen":"2026-02-01T01:13:50.230614Z","last_seen":"2026-02-01T01:13:50.230614Z","alert_count":14,"request_count":7,"received_data":831159,"sent_data":3388,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crypto-mining.store/~flock.js","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-08T17:49:37.717607Z","times_seen":15166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/assets/index-Bz-rYLry.js","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58318f738da1533d2b74f89a7b389705","sha1":"07a6f76bbd479079dc0996c7e04fa54e860ba93a","sha256":"f673e554dfac39459a1b9adf488e61e2459114809d3bcef655c47d4a0ccc2e09","sha512":"1517d8e39e20cf5cadeb50d858ded99fb5cd8ac14ca0951cff0d8a9fa38a137d300e8ed888cef65ddabd0eaa04838eec6efdc9e3c8ecc7b1bb62743253d7c94e","ssdeep":"12288:n+J1RylWKDZGlZxZqOAdHHEJYuhn8yVUKKyY6jZwLSkzIb+Kx+a+zxsxXc0sDDxi:kySvTqOs1uZuylZwLSkzIb+Kx+a+zxsJ","tlshash":"88e46dc47156b5799be645e0907f1102f13d2a05f41e84a0f17cadea3ab890ae637ff8","size":715650,"data":"","first_seen":"2026-02-01T01:13:53.260651Z","last_seen":"2026-02-01T15:09:33.127348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2acd3d73bbc8d3ba3f35629bb52bdc87","sha1":"1ceb5cdb1aaef828d045f93c024d676b2a173ff5","sha256":"b6ca917f8a08af4a6ad8cc558c1aa032e1e0648b79ce297747c7f6d3a6693807","sha512":"087546aae007202ed3509d48e832308255bf2c81f32242f4fcfc51a4bd81b653856059e7c9abfa88b9fadaa45ed3857d59acc885222f8d6f2234942b235402f7","ssdeep":"","tlshash":"9801afcbe7ec623243a5b4b9185aa5dd3e3800f0eb005bb61c744db43394d5d002ee81","size":829,"data":"","first_seen":"2026-01-07T03:19:54.535133Z","last_seen":"2026-06-07T05:26:16.21982Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"crypto-mining.store/~api/analytics","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-mining.store/","date":"2026-02-01T15:09:10.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://crypto-mining.store/auth\r\nContent-Type: application/json\r\nContent-Length: 348\r\nOrigin: https://crypto-mining.store\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=489a8d10-0d44-4f99-8417-87b5d6363bb9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":348,"data":"{\"timestamp\":\"2026-02-01T15:09:10.740Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"489a8d10-0d44-4f99-8417-87b5d6363bb9\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/auth\\\",\\\"href\\\":\\\"https://crypto-mining.store/auth\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=KVmYOu.f6VtOaGjSzWpWuUd2Jf3aEKpA2.npWDW0v6g-1769958550.74433-1.0.1.1-em6khwnh.DKwyu_kflyn_jEN4ULDn6Gh1L5limvulP3fzQzXg_LbQ.tnbrtCE4_7GBcqckjrN6MS_olkvCp_6CwKvpxkfYv5eNXEd09hZm_7VPsJCdUgxNE5mA4i70_N; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:11 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c725e4e2e193181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-04T21:48:10.819261Z","times_seen":12920,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T15:09:09.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=eQMdpicRAfxcifaQzv_uZpF4BAlkugKZl6eQ2exX6Ao-1769958549.615937-1.0.1.1-gGSoXQZaejqihlrdZgImwM6_uVaZX5kTRUceROWNoHdiSJieyUYsHkwis1zflMxXjkScReo9X254xYxgbsfV_EUJN8bhkCo8G_xIc3HeA5J_SbIuK3yFNp1aAK9DUEEi; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:09 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"dab5f35f247df768f9491f84572d1010\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c725e471ce53181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11040,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2980)","md5":"9bf77d5fae4adf097613177336bd56dd","sha1":"ca698e42e869bc1b2955a84cac18aa285d47f5c7","sha256":"2058df0b1a755af7bfa71f0b91bae099e06e9a8cb5aeceef737a9198897911cf","sha512":"38048e0d3fbcc9ba07b6ea966e3acd78d5e11f1353a268181149c595d71a01f036ade568d0d1f69f239566ae9f6e5531b98eeb420eee875b0c33ce54f69f0e02","ssdeep":"96:1QZRzGWRzfYTU15OA3lghaoX9DSjxpeHTwKaS0g2+3wehaBQ8VjKx3NuZkTmB0q9:1kRfRLYTUqYv20jywAcQSyUZxBH73YXQ","tlshash":"d032e8d3c354b63e43a1d1acbfe9f4c8172990f3e6058de1b55e097906c7698e117e90","first_seen":"2026-02-01T01:13:53.259484Z","last_seen":"2026-02-01T15:09:33.124093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":108,"dns":91,"connect":1,"send":0,"wait":312,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/assets/index-Bz-rYLry.js","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-mining.store/","date":"2026-02-01T15:09:10.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"GET /assets/index-Bz-rYLry.js HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://crypto-mining.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: __cf_bm=0caDDzZcRPfSQnWhdWazTMGCfVofVQZs.gGmQyAXgic-1769958550.0763025-1.0.1.1-iP_pUy1OdgK9VqdqIO.vNKYNiInUptscmfoi8KdffMQG1uaxyluPT4QimqdumtuVG9q2QtgEE.VTjZKWFAb9QsOrVM.U_C74GRBr4ZT2VjWOb98W7JQYS1_ML8SFsiDl; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"58318f738da1533d2b74f89a7b389705\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c725e49fe6d3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":715650,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"58318f738da1533d2b74f89a7b389705","sha1":"07a6f76bbd479079dc0996c7e04fa54e860ba93a","sha256":"f673e554dfac39459a1b9adf488e61e2459114809d3bcef655c47d4a0ccc2e09","sha512":"1517d8e39e20cf5cadeb50d858ded99fb5cd8ac14ca0951cff0d8a9fa38a137d300e8ed888cef65ddabd0eaa04838eec6efdc9e3c8ecc7b1bb62743253d7c94e","ssdeep":"12288:n+J1RylWKDZGlZxZqOAdHHEJYuhn8yVUKKyY6jZwLSkzIb+Kx+a+zxsxXc0sDDxi:kySvTqOs1uZuylZwLSkzIb+Kx+a+zxsJ","tlshash":"88e46dc47156b5799be645e0907f1102f13d2a05f41e84a0f17cadea3ab890ae637ff8","first_seen":"2026-02-01T01:13:53.260651Z","last_seen":"2026-02-01T15:09:33.127348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/assets/index-CfuX_YJL.css","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crypto-mining.store/","date":"2026-02-01T15:09:10.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"GET /assets/index-CfuX_YJL.css HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://crypto-mining.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\nset-cookie: __cf_bm=CMH3lyERFeEBWkktEK1melksY3e68TfyRcSiZuEgn84-1769958550.0766785-1.0.1.1-Mox7V5FUE90r424F1SleSO3W3eM7de2W00VhE6oxJPMsP.wHm9XFk1jEbA3g7vLhd80WCXc_CINhpPPL9BhXlPzblw8D61a3HWYl3QNN9gr0CA_tm7_BZZDPb1SOPMVX; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"9a0ceade52a3d00a2f35f2ea22a5ad8f\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c725e49fe703181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67257,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9a0ceade52a3d00a2f35f2ea22a5ad8f","sha1":"487f50971be5083d6ed19dfb75d54987039350e3","sha256":"0f4dbaa2523a997a224a63a30bf8cdc259fb4aa63dc12df8a520ac6372c831c0","sha512":"1d89fdd2b09cb750867c34bff2b6236245cb2efecfcae1c6f5be64649640d583fffe0146d37ed9f28a8696dcf5e5292047cee2bf50e46250cd28f7d020159dc6","ssdeep":"1536:8H7hQjJdPBzkywUUHGPCV378VQZkt5FNCorl:AhQjJdVktUUHGPCV378VQZkt5Ffrl","tlshash":"74638519b519617e3c2790e8c3ccb9ec610ef0c0de3a06b9be9a41216bd37f619b7554","first_seen":"2026-02-01T01:13:53.26177Z","last_seen":"2026-02-01T15:09:33.130016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/~flock.js","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crypto-mining.store/","date":"2026-02-01T15:09:10.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://crypto-mining.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=ot5jATV93MVQHHMnrrn_l6Toh2845aYL_cipYO4ZF3w-1769958550.0775588-1.0.1.1-3A0FOTQ.QcVG2hPI1CFJ_6181VHYWVEja0mx7GKhpFU0nwqjcVyhCOI_kxK7v9hBuuZBP_7I.pnxPXqADW5VDZbq8pGOA6sqcMGfOqr_F4QF3VLTm5I_C2F65i_FBAR_; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:10 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c725e49fe763181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-08T17:49:37.717607Z","times_seen":15166,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/favicon.png","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crypto-mining.store/","date":"2026-02-01T15:09:10.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://crypto-mining.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 11065\r\netag: \"9268dd16e36bc44c1538ec41d4e01b72\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=lloFeGId8eKL0ZQEeagc8GUn_.XER1dCiXkFDbXWevA-1769958550.414901-1.0.1.1-xODhYVIg1.4CkRGuu_IzxPeAuObI94zQk6del2_Q2kyPcVYLOjfLq_OPxhZIxo8mE5JNK2TMdXBGrG1BFXO_BdO2S5W7z3EW9YotJxyoWBtgtCIIG09cVk5mv9MRi.SL; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:10 GMT\r\nserver: cloudflare\r\ncf-ray: 9c725e4c1e973181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11065,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"9268dd16e36bc44c1538ec41d4e01b72","sha1":"2a05e49bfb67586df2368abb18c9d656043c953b","sha256":"f9db68635d37144e0bab6c4ff8586f90de432094c700ee5845339d2791aab559","sha512":"7c4e72057f11fbfb9c4fff9fbf9990db37a80736d1bb137ee599712a9f75f01e8759285e573fb6cd995b2ce3122245b6dacbed5ada5eb83744d59d1befd92270","ssdeep":"192:LS4M/erpWPXgQUtFGqgT5pcz1QxJo/47Jzvlx9h5jIVD0SXlR:GErKH6cyxi/1zL9h5jIVBXn","tlshash":"2b322a079c2aaa83d731c3fdbe074eec4a593d1df41536b32667ce9238609725d1d02a","first_seen":"2026-02-01T01:13:53.26333Z","last_seen":"2026-02-01T15:09:33.133917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crypto-mining.store/~api/analytics","fqdn":"crypto-mining.store","domain":"crypto-mining.store","tld":"store"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crypto-mining.store/","date":"2026-02-01T15:09:10.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crypto-mining.store","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 16:26:26 GMT","end":"Sat, 11 Apr 2026 17:26:20 GMT"},"fingerprint":{"sha1":"25:1C:1A:67:78:58:0F:E2:90:74:F1:C5:EC:30:04:87:47:1B:29:46","sha256":"71:99:C3:72:BE:85:BB:6E:93:67:BB:EF:D0:56:57:E7:60:6E:8E:08:77:EC:44:58:CB:11:F4:AF:61:80:2B:1E"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: crypto-mining.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://crypto-mining.store/auth\r\nContent-Type: application/json\r\nContent-Length: 348\r\nOrigin: https://crypto-mining.store\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=489a8d10-0d44-4f99-8417-87b5d6363bb9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":348,"data":"{\"timestamp\":\"2026-02-01T15:09:10.657Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"489a8d10-0d44-4f99-8417-87b5d6363bb9\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/auth\\\",\\\"href\\\":\\\"https://crypto-mining.store/auth\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 15:09:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=v5S0HHrxlsv5lAmlQp0SQP8ApUl3lJoKwuhAYmoVGk4-1769958550.663137-1.0.1.1-J1.pf.BYwTA7AOkgLAZUSj5s7cz0Z6FTBDjpsHKtpV_Y6_vqMkkjeUaaelxnSNtLOVvzqCNwiw13_QeEYOVnQQaCdTkty3qzyXg1LwBdzy4i3W7Tmf_l8LL5bZdqR80u; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sun, 01 Feb 2026 15:39:11 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c725e4dac893181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-04T21:48:10.819261Z","times_seen":12920,"resource_available":true,"data":null}},"time_used":1148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"crypto-mining.store","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
