{"report_id":"d3691a74-1f0c-40d8-a833-e7bf4477d16f","version":0,"status":"done","tags":[],"date":"2026-10-11T00:10:28Z","url":{"schema":"http","addr":"alrafahfire.com/","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":0,"asn":46844,"as":"Sharktech","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"title":"AL RAFAH GROUP — Fire Fighting Systems \u0026 Technical Services Dubai UAE | Al Rafah Fire \u0026 Safety Dubai","dom":{"size":161931,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65496), with no line terminators","md5":"e56689b31f8f30bb5269346df38172fd","sha1":"f5cfbebe98cca6c0ab1bce06e0a4fa40ff11ece9","sha256":"03b4950d7861b254b06b19f4fc5ee0f6488145e5a50615755d7da9e82288bcb6","sha512":"17f9b11340a2d707009bbac51902296638403c065d6f55b4a5845662034e21e91d0fa3ddbda901ae629d33ab58228e9696b504f914fee3e81ec1d172c8f6c279","ssdeep":"1536:TPDjh7MsMiMe4BCkkkkCkkkkQkkkkYkkkkMkkkk0bkkkklLj5ZzBdBwwXQLTavDH:TPD11P/sdzRQ5y8nA","tlshash":"94f31a352608ee2c95478ed8b7babf35526dc165e65bc46ca2ecc43113c3cb8da676c0","dom_hash":"domhash925890e80fbe092cd397ba25d7d18daf","first_seen":"2026-10-11T00:10:53.654176Z","last_seen":"2026-10-11T00:10:53.654176Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"alrafahfire.com/","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":0,"asn":46844,"as":"Sharktech","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:10:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"alrafahfire.com","ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-06-18T07:55:32.825835Z","last_seen":"2026-06-18T07:55:32.825835Z","alert_count":96,"request_count":32,"received_data":1557212,"sent_data":16548,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":534554,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/09cnb15o2pl2~.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38a1dd1ee6fac489673033761267150b","sha1":"69dc9b8ab81b37efd73d1d94a339a609292fbf52","sha256":"6bcc8a71abae48d6b4017c59621574c93b7ec215bafa2d5250300f82265b0a24","sha512":"76cef257c0ef7ab3f42632eca483141d5131c69d1eef95c60f45ce9c5aef79d73daec9e7a36fdddd18c40bdafb5a2c923ada0778d7414b83593920e428276a13","ssdeep":"384:2lur5/Kd9LKA3eoPyMK+A0aZYQQrZ5MkMmSAqLL/o07qMGDEYDW36m4Qj:28Ed9LKA3nPaBbTGZ5MtmfqqBEYC36kj","tlshash":"6dc2a544a184afdcb56b05d8aa6fd00c612f6facdf1fcc68b5fc6c250a41488b613bc9","size":27301,"data":"","first_seen":"2026-06-18T07:55:58.985059Z","last_seen":"2026-10-11T00:10:53.852069Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/1406l3kz6sx3v.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d45c9e6792925c28139ff9ae73bbd3b8","sha1":"dc401af0a36773fa22fc3d3182ea25b06c04adea","sha256":"f2dccb57ced4a83f1314fb490192b6c3dadde341903680f547a711a4ce0ed750","sha512":"34fbe963ac79a2f78ee9acde56eb8dc96962b409ef8d360bb6a220d221974d9fe52835dc3c2b1569d5e9d29b95cba21002c5636110710f1b0439ef1b24ad39cd","ssdeep":"768:ym20HiEk3GLVVugMBdpSI6ig9EVOGJadL/C4OjTZAGnPh:fCE6UVVcBiP79EbltAsPh","tlshash":"ce033c617291f8d9565b81c8942f800cf23f1d7c951ea824f3fdacaa5760889b1b3fe5","size":40223,"data":"","first_seen":"2026-06-18T07:55:58.997385Z","last_seen":"2026-10-11T00:10:53.690136Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98dd79ccbfacbd203a460b6ca9225ff6","sha1":"fc5b5147defb7366303113cd8cb5795358928e23","sha256":"9f8eaf3f0496b8c0b45bbd37a41a1f226bfcd99dbac68e0b5f29afd04f5c68f9","sha512":"c05acbd5f792cd3a980daa1fc42393425b0c7dde4998c8e4b368d4287101f7689c99af5236558993635837e82b39e558c73690bae65f140b83de8c7259ce4882","ssdeep":"","tlshash":"65f00535472c102209ec49f5c0894bd83d2d7152d0145160fca9de7d0948c5fd053edf","size":527,"data":"","first_seen":"2025-06-30T14:23:19.447532Z","last_seen":"2026-10-11T01:26:16.657742Z","times_seen":15502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-10-11T01:43:55.583211Z","times_seen":286549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"32f9b6cf576dd314877f376310bf1020","sha1":"96cdc7244b4e44b299f7a73925ab1f4dc94bef53","sha256":"74c249bfa493f4f05d1e02f2726795c5324323e6aeacbf783d6ffd6f66b9b47c","sha512":"5df9626389a62c4c00784942366992984c826ef81663d54112e0ae1a64c83b98acb97511fc6cd1451c12105a705734d4ab4ae2e9206ebfcddb6e55b390ef774f","ssdeep":"","tlshash":"2061680af91bfd4129b1ec9f44af4fb284c4d93e9079821cb64dca8a15b18b7179c886","size":3260,"data":"","first_seen":"2026-06-18T07:55:59.019797Z","last_seen":"2026-10-11T00:10:53.865202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aaeb28134c0e407a03f9805ebae2b7a6","sha1":"e1d9e691c816f1528c792a595d42a3eeef5118c5","sha256":"007df1293ba280fe29085055c91f035d330b6a1a4df8e32b235fdfa9e77d279a","sha512":"52f2b2b2f8cf45b3ebec79102ed0482345b1d427c9014b3e9b973fcce593b932c0e17acf339376f87800cf9b9fbc853da1a381eefb0d5cb0e9dbec98a1aef226","ssdeep":"48:LZCGSUZ6XN/+rnsy1Xx+P1YsynBn6G7cHA1xqzFfRa1/xm0px/yX/+/jVMxP/+fa:L0GnwUWtQD7cg1xqzc/xmWKujpTZ8h","tlshash":"b9a1c11e7805ee46ec7e7c69023e9d3a50cc897b43a4ddb8a6cdce050b4647a27d9dc0","size":4989,"data":"","first_seen":"2026-06-18T07:55:59.020704Z","last_seen":"2026-10-11T00:10:53.866958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"528756049125a17eab14667ad822ac43","sha1":"0cb02b8306f1347574a9fe8cbfaf28982ce7977c","sha256":"3f1b7ca149dd5bcc22238e980f6ad4db7124cb35e0fdff91b0cb699e4dbcb4c4","sha512":"68fda3a1392e879f7d170079962210fda70d69cc4315d702dcbea017635a12a0a6cc6f1749fb4d91ad2320b2e9d0d195ef8e5b8332f68e72b0bbae3114d14ef3","ssdeep":"","tlshash":"048000f8e0a20e2a80b30023283822020aeca02800000080a3e8a08820222ca8f8ae8a","size":34,"data":"","first_seen":"2026-06-18T07:55:59.021596Z","last_seen":"2026-10-11T00:10:53.876104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd52a07c1e90b653a5d5f746e0b80b46","sha1":"d836919ce4085ce7a5a9f54904845e77557cbfaf","sha256":"bfbd60342ea7bcb80b0a57b95b295826de421aba4e8e46544d6ba330361b1d5a","sha512":"e94aa18852971090df75497db3bfbee27679aee5b071fc0080d26bbdb42ecc5d025946559fa0faf92f6b53d4218d4da73b1ca0c846195c907a5e195d80543419","ssdeep":"","tlshash":"d851230fab94e5aed6861e9807ba2c7d3135d44e15c959f841c8c42353c24fdcef6358","size":2737,"data":"","first_seen":"2026-06-18T07:55:59.022614Z","last_seen":"2026-10-11T00:10:53.877968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1eb0150cd9bc50e1aa6878a4bd0f44e7","sha1":"2f8ff25d4426465208975cbc4ff32ccf14d07927","sha256":"a15ab09c7b38c24f9a2ddb25d518022bc639413f3aa6c5eab8764b51ef23d1b9","sha512":"780a8c4db6dfd4654fa7a093e1ac8e59aab1275ab4f6324a46346d1ef35fe0196fa26367342f17ebe0f2ad17f1134bb1f1c595f656fd02f4f0141cd0bc259764","ssdeep":"","tlshash":"c5519ae6a411dca6c9d36d5822f70d7f65b580cd4dc686bef284fc520aa70f88e80b42","size":2783,"data":"","first_seen":"2026-06-18T07:55:59.023566Z","last_seen":"2026-10-11T00:10:53.879549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58f2387e13dba0c6ded40ffde94c9948","sha1":"c7fade2bc012a2db3898d494f188ff93efdf15a2","sha256":"b50ff7f6c5c682fd48aad5003ef041d7fcd72af1925759f594b3cbc898fff55f","sha512":"3d74b163a70637ead8112ea4830e519e717c63da50ea6efd4376bc31345cd9bdedb42be5ac328d0708572559d85c8b6eeb573dab799838676ee981edb2ad20f6","ssdeep":"384:xb8bdAGCtyvWWqpMIuHOMkskmJIQ+UWnIkOZfXAzMa+:xgCGCtyvqp5CkskmJIQfWn9ORlz","tlshash":"9372a52e7794d62ac7c65d8a273a2db3b03cd11813e1a47d61ddc009a2d58bc97fb0a5","size":17169,"data":"","first_seen":"2026-06-18T07:55:59.025506Z","last_seen":"2026-10-11T00:10:53.881321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b42e0e3f8a01b5d2a112da9f0f6b19e9","sha1":"fe0291cd409669303a3be9de2cb1cedfc627eb8e","sha256":"ce4fc7f83b29540f1d232c86fa31a5460c33894d4d7206234e8371510b86d57b","sha512":"83849b08ffecfaf65f73b1785ee93074ae8c31de1fa1d698b07c8f34fd383ca2cfccf88c692c226e2ab7b716c0bd436fd01b7a058ef32be3bdd50ab3cecc13ca","ssdeep":"","tlshash":"35217b2a2001cd4aec5f3c2965be6c34108dc93b4b66dfb5c2ddce2166820392bd6a80","size":1224,"data":"","first_seen":"2026-06-18T07:55:59.026433Z","last_seen":"2026-10-11T00:10:53.883308Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a45acd2d3a2d12aff6bf8f19930447dc","sha1":"bdc4d48c1c00e3145e98a3826459aa8683ed1916","sha256":"0cba869d99be2cae7b2ad4a384aadfb21f94dd99148039e0071a44938038e1cd","sha512":"f1212a2cce06334ba58456499265cea2d24adba84326c42dcdfd292fe7ec08f8b6ffe7b61c5ba0a12a196eecf473c4e1a87ce9ef50faf18b7a039b76b1d3d4e9","ssdeep":"96:LV9OdRs5k8U/ptiQ2kAd95hB4eur0sai7SfSXxVjT:+FptukiRB4X0sav6Xv","tlshash":"dca1e12db106cc7dec5b6c58227fac3a758ec2674b8bae25c59ccd31154243ce6a39c0","size":4991,"data":"","first_seen":"2026-06-18T07:55:59.027346Z","last_seen":"2026-10-11T00:10:53.886161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"540060d4f2b874bdb51e2189badcc026","sha1":"77387f95e7540f3913128f16736b9064c99486d0","sha256":"e7fe712378e4f975bf1dc0e34e12f19995e365d2805386965cd1f5d3855a8579","sha512":"4a0fb4e107211a5fcbbec044c6fa5eccca0f5e52d0026fce5d1af628eb3dff5f187121a427fc0e47d2cc03fb569d202e85e7de4a9cbd520a3fb5cedf30bef2e6","ssdeep":"","tlshash":"ac716e286101cd9ded9b7d64107fec39a1de829ec987edbd92e4de20478a83d67439c0","size":3595,"data":"","first_seen":"2026-06-18T07:55:59.028127Z","last_seen":"2026-10-11T00:10:53.887882Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94aace377f2babed481af7082da6f106","sha1":"545c92f5c115bba47a58b6a7d3dea46d9678bf94","sha256":"410377506b1068d02a6012f6f8149cce0e3995680b238df22e2679dae436eff9","sha512":"cf2bdae1e7a3dd0dc5acceb1fbdcc0ac243939c15a35f9a818f32e842d343c7807babce3dd1b620e17422cf1ae83ccf81ccfe2361adb67fd9dcb5b3df25d3dca","ssdeep":"96:LZj4hKrwW703eXRiMD6eXRe5MD1veXRuMW/mkM3:+ehdOehtVehpW/m33","tlshash":"9191ac3ca60ac96df86f5e58063e9c35228fd1676b4fee60c6addd314242078eb539c0","size":4571,"data":"","first_seen":"2026-06-18T07:55:59.028993Z","last_seen":"2026-10-11T00:10:53.890216Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7503a363c55398065fa7d84610ac0a1","sha1":"32bd6be67ac2f06a13886c67013d777de55e5630","sha256":"2e34443ca29910faf39a38a62bf4e457d93e575ef90cc39217e3a6135230a70b","sha512":"786cb5f41346c757fffa8e8e695e2e399804d6d6e0cc8da01ebf4a73653c16c933921f812e0fc7e131468708368f9f131825ede94d07843a2a285a199a200951","ssdeep":"","tlshash":"1a0149387002cdaded8a3895293e9c2d618dd28ac95acf35e2d4dd2185c7c3caf915c4","size":772,"data":"","first_seen":"2026-06-18T07:55:59.029931Z","last_seen":"2026-10-11T00:10:53.893264Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9474255653b78f1d0e52c5f1f3e94069","sha1":"131e378161ae9c2149c5300a98f44c1713fdfebb","sha256":"4cdd2ffc65e2cb4c937eb7fb6401e4975543cbc26cc3ff6c979fea534811e119","sha512":"f2f8908da7d8e01168bcf3d36a41d09cc6d4bd712ccc365c936d620eb4cd70de8fec3a1bcdf325e0cf74abe76f01bc2f8e474c69678ee6300b9f11a77022b434","ssdeep":"96:LXWpWdTdROxtBWl2CXt9RPVDiBYB7J7DGKHYovJpWVXDTX5gIpNPrBy7y5yHyWpf:3HAW5sUGFoEXPX5brBIQ6J","tlshash":"aab14bf2ac53dd55c7c75e082c3f7cb660ddc3519289d25ef298ca3445c79744ae0651","size":5199,"data":"","first_seen":"2026-06-18T07:55:59.030757Z","last_seen":"2026-10-11T00:10:53.905263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b2afe02553250fba0bb3dc2e4e37777","sha1":"e5d4ab336c380755448cd8825f128d9480753a6d","sha256":"7b417e44aaafd1c4b17c77fbeab132c3b24b182510ef394741ce42e3a7d96d7d","sha512":"3dab18ac1240b28624a809487e7701759fa6b65eb67a889bc4ee228dd616ee152bc823aa3be9b5a579382be34e2327ce3f4937d6a65f4a38e8c43c8bf483267b","ssdeep":"","tlshash":"85219be8ac15cc06c7c6ed060c3b2cf110cdc1724189e51eb298ca7ac0879f056f1f62","size":1169,"data":"","first_seen":"2026-06-18T07:55:59.031636Z","last_seen":"2026-10-11T00:10:53.907373Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c49ca786d64b7cb3776972f8933f46","sha1":"9b0b078718108b44424703007f6f3c93f9a870b6","sha256":"7fe9a92721d66c5694b3f7c2849f2e7b3079f58254ec82c91c63c9f67e584ad1","sha512":"4b8fed92a85d9458f8715b4de28da7bf80efc815f6a7d6eff09f7d2c2d8d5b10b67b7ffbe61c2a284d589b998065357222277275be8058b6ad769aa9cdeb353f","ssdeep":"","tlshash":"03619c1ee91afe54a9a1ec8f487f4f73c0c4c93b9079422db35cd88944a193b1bdca85","size":3336,"data":"","first_seen":"2026-06-18T07:55:59.032499Z","last_seen":"2026-10-11T00:10:53.909733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/11-52pcqdxpe2.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0580cbd01241b8ef932c77521c07e9a","sha1":"a620ab2043cd5ff2756a4eb8dfa1d7790dbcc128","sha256":"1db04b9f9abe4488870b8bf5d44ffa5841304df9f0bd13c758abeceb4a6bba7a","sha512":"3ef66258503d11dc014da72b6a9067126c9ba5dbd61a193b24db8d8af38bde1aeb29326c5727084dde166e0d52314ac97f3ac2f62b63ae93fecfea048b1617a6","ssdeep":"384:87r6dkTd9KjBT4dZkTdIpoubIBqjac/s+rPYjDExpCkKMny1V0UGewQhxHAlweql:DQv8Ioukpc/s+zYXExp7ly1V0UgI","tlshash":"a713d8b132d4faa3539341e4e43f2016f2780d7520ad6470a7e89c9f754c88da6befa5","size":44414,"data":"","first_seen":"2026-06-18T07:55:58.983103Z","last_seen":"2026-10-11T00:10:53.802989Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0~~qvy0b01dsc.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e1a61abb035442a6dc3f83b9e98e90b","sha1":"37d93775926bce3f7385aa4b4a353da983373ffc","sha256":"2518221d66f3ecbcc1611e5436f0f465ea45194516c4d6c80977c79211277ac2","sha512":"569b1b7f99e9b486ecee686637afc53ff44a22db3311375429b54e04c9e2c43418375ff68469ea27ef4f4d6a5cadc8cb76b191b76e88cd100bf3cb47dac84695","ssdeep":"384:i6AWst5gWTnDYV3uXeqbkCdeUtdaUmzlmuNf9zXYpDuYNb4xzpk81BZTDxJRiGR7:RAWstOoakEXqD9YhMF1kwCDFZLnqXN+V","tlshash":"1d33d9b53295faa302db91d9d0370012f27c0d71309d64b4b394d8af395dd8a92faf6a","size":54647,"data":"","first_seen":"2026-06-18T07:55:58.973768Z","last_seen":"2026-10-11T00:10:53.807633Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0p76cqyj2m-94.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a26c7720a16cf26d6b2975c416f4e8ee","sha1":"460579d4ad060436ca4771a4c812492395f2b100","sha256":"9b63f316502174e4120f39362625f930faf57ac90eba6df8a73b3c717a5828c9","sha512":"1005371a1d7386fb4ac7fdea4de992a315d89d10ac4c19baa8a48ca09c68234bfc540f566fcad3a650fe413cbca7a1f6cc8445c987b323bd42a8233fc5f63941","ssdeep":"3072:w0tnlPVR/guA4M9TjUyDVtt43ot/EXtDTcd:w0qLt43c/EXtM","tlshash":"84e3f995b351712587cb52d9c06f0701ab3f29e8204d402db77dadcb296088a66fff7a","size":155206,"data":"","first_seen":"2026-06-18T07:55:58.984032Z","last_seen":"2026-10-11T00:10:53.738027Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0w3w17qwhkz21.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64e12dbc1692a5475dd34ebecef70c6d","sha1":"c18fd2f10ae9d933170de88578fec14eb030241f","sha256":"62ba3869f851b2b2c8bf5ab68107ee6e15f37dce4e1c12b33baeac1b67abc0e5","sha512":"65dff24c2a1271f093c77182facabc47d2e74d57b48208116d481df43a8165f71bb9300a4bf4852b43d22adb53cddbf54bca6ea42d3f7c1804110de1ef6f346b","ssdeep":"3072:WTJt2sM4BFfOg/4NqwuQtPHllL2bgmaIQHnXxRMujgDngh7GP4:WTJtvxBFfOgAoQiQnBZ0Dngh7GP4","tlshash":"e224fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","size":226354,"data":"","first_seen":"2026-06-18T07:55:58.981857Z","last_seen":"2026-10-11T00:10:53.72174Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/07us~nenmv.fl.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5312b66978bde7ea5d68bcb229f88210","sha1":"3857fc04967e4d5856545e2bfbb0f00916c868ff","sha256":"008684f7b9e68f5402de84e1ff865e7fd0c82ce6c7e9a4bbbef60392d91d832e","sha512":"726e360f02317297e3dfc0338077513ae73300d35902ec55e1f87d63f4d13bf304486b5fbb54fe9c01c8fe5f2ac5c6f98cd23d08610003c2e781144f8a4a9908","ssdeep":"384:N1Fuqy+nD+RkZeJXe3aZUWvL5bO3VgmIQ0QTsm1U6K:Zuqy+nD+RkZeJX+KUWT6Yt","tlshash":"2692c7c17281b678979e8585c53bc02cb73f7a2c640e103cf5ba99a52a55290f2f3fb5","size":20937,"data":"","first_seen":"2026-06-18T07:55:59.016719Z","last_seen":"2026-10-11T00:10:53.854208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0j60s563~3l.i.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66d8630da88e51f85e1331fe7bb2217c","sha1":"f09f0201474714f3b906ba4c1489ac2482fb8cac","sha256":"4122dd6eef5d81f972cc2f6132d9723ccf549d16ab887e1b9153aed19af19972","sha512":"6771087cd7bae6056284c1cbe01a4f5a57314c6684474e9d66d6bf1aab5ed62453fea8ab047aa0a33172287216a2112c99b4180d58b8699f3e4b442c92f4d3b2","ssdeep":"1536:TFhA+g9ME/bx6sgodpZsIdIQEZOzivl/Q4pzs/psnyaYbz+Wrpe54I02xHS0ESXB:Ty7bxaoTZNcZOzivlXNYbSWM5p02HvXB","tlshash":"8bd3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","size":136664,"data":"","first_seen":"2026-06-18T07:55:59.000776Z","last_seen":"2026-10-11T00:10:53.839658Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/12k7rcaom20oa.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c0ae6c0e4cd07041dbdec22618ab7b6","sha1":"5f5e6f56a9ed77de80086908a9b9138ab468ca49","sha256":"32b92ec9414e5c9a16dbe59a78a2afed4c88815972b38b9cd2fe08d40cb30b4e","sha512":"754a1215d549e22346f8035c0fa06121f4c03111c0fc5f873d39c85dc7561f91afcfc7c3477d48c815f9c5c601864b5a5b6579fef801f327217de0df9fda0d6f","ssdeep":"384:QDTnc2rQFwFQcJEeFf8IaxCtvbyBC2TAyUK86uMcm1j9hVlXdjzJr/NS:YQRx88As86uMcm1TVDxzNS","tlshash":"6b92c61a6957447e6effe3e2e16cef998a290506c51d0bacf2d74f328b44f95818c708","size":21220,"data":"","first_seen":"2026-06-18T07:55:59.01443Z","last_seen":"2026-10-11T00:10:53.684652Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/turbopack-06ovr8jphdpt-.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f29194f4fc79aba0fa058dd5f201767f","sha1":"b289fc7a001a1014fcc3801e486afba23e18ae58","sha256":"383218164bef0dce9d789560c532f4271d66159e6d51e4e89766491740229f94","sha512":"261d873aa45236df4d5f0aa00c2cfd78a69909435b599c9feb914bb260c36ae1977875095f261bf6c5b34351b61e491017b607c314fba348cca9f2851508910d","ssdeep":"192:M4gM6B68QEsg6+9EiZfYG/lhjTNWn+S3sBT4fCT3cXXqroor2:M4gM6VL/lHW+ssqCTMKA","tlshash":"7322c7da33a6f07343af95e7906f4004f17984a9145e141cd3aca8eb2c394ae85e7f76","size":10613,"data":"","first_seen":"2026-06-18T07:55:58.97936Z","last_seen":"2026-10-11T00:10:53.73442Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3MNX2DMYP6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e35f915d8d0bbdf85e53e3f1a1ba38","sha1":"7ebafb9c9363103f83aa3d7f05b14e1b43642f2d","sha256":"f802d495606a8a8dae2b4595b539b9f60ac439da85f3252861c4737c00ae04d1","sha512":"29b992b98dfb460c6b84c60ce0646c3f34b9b68746ffd19fe966a37b29a8cf37f4a3186c0113397ad096b487c32cd3bff4c9fd99e1e1301ac7d34b39a59d731a","ssdeep":"6144:zb3CWSKqKJ2qF6F4V2H7s/c0wb0EHa3EE86J/BLiSiHwp2Wwp:zFzIEaKoSiQ+","tlshash":"24b409ceb3d6742253a6f078903f01cba57b29a2b45cc896b189dce02e7465a4137f7d","size":533950,"data":"","first_seen":"2026-10-11T00:10:53.82249Z","last_seen":"2026-10-11T00:10:53.82249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/11.wb5oz-vjgj.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd222dba9b192e175cc986b0749817f8","sha1":"33dd9a387822c18a1053ead692b37fc6250cca78","sha256":"30173859a7fda9beb2b12a4cdf3e1ac769bcb0638f6858e663aa89fa82073353","sha512":"4b63379bcd83e357620272141c3b1a7e36352a114b941c157fc5208aeb8408e9743c04d216dbe948f4d8bd2ad5ccb179923454005e179beb7a70c6f6603d8d47","ssdeep":"96:pPQigpuv2FHL52j45y5Iie0RES0/0QPf5v2WjA7sa6Rbxmqv2P:9Qigp5WDhEB/0IMiAZox2P","tlshash":"1ad1c720f685ec9b775a009854b7a00af214343a97b4f872b7dc54f21b801fa7d6abd4","size":6545,"data":"","first_seen":"2026-06-18T07:55:58.992138Z","last_seen":"2026-10-11T00:10:53.666118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0kut~~3glp2e4.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2650ebfe5d6b049c1f9bd1cd8d0f335b","sha1":"d758a904a1714a1721e1b02ed857b0cfa4168bfa","sha256":"7a3e6b08c17d96474bf5a4f7e3811dc1fe5df3f526f7bf5e0f64d747bf9edb06","sha512":"56d95650d58d4d4cff217772b64b0e405cfa701b19559b170c5a54b05198fa47ac68c2896c1076611d8ad75675876d2d9e266837eea14ffaa78fce6ecdede83a","ssdeep":"192:m3lfc6k+CUBGNSj2OxaX33h2QFzWLl6db59igk5LGL9/3DtDMP:m1UqCUBGNDZX33SJONPk5EBe","tlshash":"dcf1e9d972d2f873835a80904437415bf22c1eb6344ea0c4d7f998eb7624e4d81f2f99","size":7850,"data":"","first_seen":"2026-06-18T07:55:58.987636Z","last_seen":"2026-10-11T00:10:53.679567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6353b2457f72c4b7238739dc1d37a876","sha1":"589de5675dd57d488f93d04b605f4faf7ed83d90","sha256":"068f1deba66809db90bc322924959d1116e8774dd3dcb7d04ac297af6a87dd21","sha512":"6e754e6d3afe1f77074ff6a82c90b7c285c2fab0fab4aadadf1e9aaa7d7b2f71e2eb5f16bacb3d5dd10b088cbab3342ed0b1a7f745df7e8f58ac98ba89c7df6b","ssdeep":"","tlshash":"7bd0228d11070c2062f32b019b2fb20474033292a9a1d921380f33045f30d17db44d88","size":243,"data":"","first_seen":"2026-06-18T07:55:59.03366Z","last_seen":"2026-10-11T00:10:53.913087Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0064ss~rx1gmz.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c9d28b0b38cfc173baffc456d1a36a0","sha1":"4bf362db8b20049b49f142f80d67bd23a141e439","sha256":"b5c90e357c405c23cd3fbf5c06680b4c6f2b45de39685abe9b630253d77384b4","sha512":"d08091965f3debffe58995f0f807fd7fcde49d0c2ff1ac79088fd803ff3a1ad893ea4eef6b4572fb99864e5bd90fa1f62610c2ae034572b79989027d7210b5bd","ssdeep":"384:t+FjFcxl/akqleEZQKZTds6YCHSWvfrvf8J6otgG4uaFQW9Uiet6ebPp1NRBYjY8:t8jo/aZlKUds6YCzvfrFUNRBqdnFvZ","tlshash":"3ee2a4a971d5f4910b9354b5803f501bf23e0db6286da0a4e3e2dce9b9b054dd133f9a","size":31425,"data":"","first_seen":"2026-06-18T07:55:58.978443Z","last_seen":"2026-10-11T00:10:53.850367Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"alrafahfire.com/en/blog?_rsc=eqsiq","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:16.200Z","timestamp":1791677056200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/blog?_rsc=eqsiq HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/blog\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/blog\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/blog\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":223,"size_decoded":731,"mime_type":"text/x-component","magic":"ASCII text","md5":"9cc9f425fcc2b6f0d57806f4bf3c108d","sha1":"53ae79539081751ef027375bf0674db3a16b3d0d","sha256":"7cf028088add5470cf6033a9704f88f2ce1f56fde273e3edd74e2737c3d64ab7","sha512":"61248bcc880c532255369d2aad8f024638134aa119197a520cfe04d1167e75d78819b1eceda98e37f62681f67a310f5e6808f2528cf5bce5fffaeb3af1058b13","ssdeep":"","tlshash":"53d09e26414519b71cbe10d1c02edc0b2a4d563723e95cf4c0911e2927a727651932a6","first_seen":"2026-06-18T07:55:59.017723Z","last_seen":"2026-10-11T00:10:53.659149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/11.wb5oz-vjgj.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.583Z","timestamp":1791677052583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/11.wb5oz-vjgj.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"1991-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6545,"size_decoded":2705,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3112)","md5":"cd222dba9b192e175cc986b0749817f8","sha1":"33dd9a387822c18a1053ead692b37fc6250cca78","sha256":"30173859a7fda9beb2b12a4cdf3e1ac769bcb0638f6858e663aa89fa82073353","sha512":"4b63379bcd83e357620272141c3b1a7e36352a114b941c157fc5208aeb8408e9743c04d216dbe948f4d8bd2ad5ccb179923454005e179beb7a70c6f6603d8d47","ssdeep":"96:pPQigpuv2FHL52j45y5Iie0RES0/0QPf5v2WjA7sa6Rbxmqv2P:9Qigp5WDhEB/0IMiAZox2P","tlshash":"1ad1c720f685ec9b775a009854b7a00af214343a97b4f872b7dc54f21b801fa7d6abd4","first_seen":"2026-06-18T07:55:58.992138Z","last_seen":"2026-10-11T00:10:53.666118Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0kut~~3glp2e4.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.597Z","timestamp":1791677052597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0kut~~3glp2e4.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:08 GMT\r\naccept-ranges: bytes\r\netag: W/\"1eaa-19df15191a0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7850,"size_decoded":3246,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7850), with no line terminators","md5":"2650ebfe5d6b049c1f9bd1cd8d0f335b","sha1":"d758a904a1714a1721e1b02ed857b0cfa4168bfa","sha256":"7a3e6b08c17d96474bf5a4f7e3811dc1fe5df3f526f7bf5e0f64d747bf9edb06","sha512":"56d95650d58d4d4cff217772b64b0e405cfa701b19559b170c5a54b05198fa47ac68c2896c1076611d8ad75675876d2d9e266837eea14ffaa78fce6ecdede83a","ssdeep":"192:m3lfc6k+CUBGNSj2OxaX33h2QFzWLl6db59igk5LGL9/3DtDMP:m1UqCUBGNDZX33SJONPk5EBe","tlshash":"dcf1e9d972d2f873835a80904437415bf22c1eb6344ea0c4d7f998eb7624e4d81f2f99","first_seen":"2026-06-18T07:55:58.987636Z","last_seen":"2026-10-11T00:10:53.679567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/12k7rcaom20oa.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.600Z","timestamp":1791677052600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/12k7rcaom20oa.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"52e4-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":21220,"size_decoded":7804,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21220), with no line terminators","md5":"7c0ae6c0e4cd07041dbdec22618ab7b6","sha1":"5f5e6f56a9ed77de80086908a9b9138ab468ca49","sha256":"32b92ec9414e5c9a16dbe59a78a2afed4c88815972b38b9cd2fe08d40cb30b4e","sha512":"754a1215d549e22346f8035c0fa06121f4c03111c0fc5f873d39c85dc7561f91afcfc7c3477d48c815f9c5c601864b5a5b6579fef801f327217de0df9fda0d6f","ssdeep":"384:QDTnc2rQFwFQcJEeFf8IaxCtvbyBC2TAyUK86uMcm1j9hVlXdjzJr/NS:YQRx88As86uMcm1TVDxzNS","tlshash":"6b92c61a6957447e6effe3e2e16cef998a290506c51d0bacf2d74f328b44f95818c708","first_seen":"2026-06-18T07:55:59.01443Z","last_seen":"2026-10-11T00:10:53.684652Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/1406l3kz6sx3v.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.603Z","timestamp":1791677052603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/1406l3kz6sx3v.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:08 GMT\r\naccept-ranges: bytes\r\netag: W/\"9d1f-19df15191a0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":40223,"size_decoded":14873,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19542)","md5":"d45c9e6792925c28139ff9ae73bbd3b8","sha1":"dc401af0a36773fa22fc3d3182ea25b06c04adea","sha256":"f2dccb57ced4a83f1314fb490192b6c3dadde341903680f547a711a4ce0ed750","sha512":"34fbe963ac79a2f78ee9acde56eb8dc96962b409ef8d360bb6a220d221974d9fe52835dc3c2b1569d5e9d29b95cba21002c5636110710f1b0439ef1b24ad39cd","ssdeep":"768:ym20HiEk3GLVVugMBdpSI6ig9EVOGJadL/C4OjTZAGnPh:fCE6UVVcBiP79EbltAsPh","tlshash":"ce033c617291f8d9565b81c8942f800cf23f1d7c951ea824f3fdacaa5760889b1b3fe5","first_seen":"2026-06-18T07:55:58.997385Z","last_seen":"2026-10-11T00:10:53.690136Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/projects?_rsc=eqsiq","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:16.187Z","timestamp":1791677056187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/projects?_rsc=eqsiq HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/projects\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/projects\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/projects\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":227,"size_decoded":746,"mime_type":"text/x-component","magic":"ASCII text","md5":"1315f111467ccb031ea601f06adbebe7","sha1":"b6d54aa4613e76a20c951e8c581551dfd99d4adb","sha256":"f9b3cb77ecdc397574559ce372436f713cc96bb4f96ab79af983254301d7400f","sha512":"94842cf1a8eecf999575322e4610e337c9ed7a04da3dde68a099cd09451c9beee692a81482d74222f0aef726665d1f8c46d8458607da14269c3a17c985774b89","ssdeep":"","tlshash":"e4d09e26814559b75dbf10d1c02eec0b7a4e553723e95cf4c0911d2927a727951932d2","first_seen":"2026-06-18T07:55:58.98947Z","last_seen":"2026-10-11T00:10:53.692835Z","times_seen":2,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":796,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/contact?_rsc=eqsiq","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:16.198Z","timestamp":1791677056198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/contact?_rsc=eqsiq HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/contact\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/contact\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/contact\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":226,"size_decoded":742,"mime_type":"text/x-component","magic":"ASCII text","md5":"d66c9949c789157b1e0dac536dd94ba6","sha1":"71b508c30252630515ef67349c4596cb0f6ccf99","sha256":"c99c317bade45fe6b6b9dd1372eb9a4e8d22336ffb53a7f37628ab9853b13f68","sha512":"1986285b087ccc923dc66878a24d8647a5413b98a3a7a76c873751458b4e6074502dda2b65256fe49d7808d0bfa8df933baae09017dee58b6072ac12389715d4","ssdeep":"","tlshash":"5ad09e36454519b71cbe10d1c02edc0f3a4d953723e95cf4c0911e2927e72795693292","first_seen":"2026-06-18T07:55:58.976126Z","last_seen":"2026-10-11T00:10:53.715466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":785,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0w3w17qwhkz21.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.586Z","timestamp":1791677052586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0w3w17qwhkz21.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"37432-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":226354,"size_decoded":71092,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"64e12dbc1692a5475dd34ebecef70c6d","sha1":"c18fd2f10ae9d933170de88578fec14eb030241f","sha256":"62ba3869f851b2b2c8bf5ab68107ee6e15f37dce4e1c12b33baeac1b67abc0e5","sha512":"65dff24c2a1271f093c77182facabc47d2e74d57b48208116d481df43a8165f71bb9300a4bf4852b43d22adb53cddbf54bca6ea42d3f7c1804110de1ef6f346b","ssdeep":"3072:WTJt2sM4BFfOg/4NqwuQtPHllL2bgmaIQHnXxRMujgDngh7GP4:WTJtvxBFfOgAoQiQnBZ0Dngh7GP4","tlshash":"e224fbe83955f662aab302b710af1803733c252b280d4d60a251fd9db57845fb17bf9e","first_seen":"2026-06-18T07:55:58.981857Z","last_seen":"2026-10-11T00:10:53.72174Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/turbopack-06ovr8jphdpt-.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.594Z","timestamp":1791677052594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-06ovr8jphdpt-.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"2975-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":10613,"size_decoded":4538,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10613), with no line terminators","md5":"f29194f4fc79aba0fa058dd5f201767f","sha1":"b289fc7a001a1014fcc3801e486afba23e18ae58","sha256":"383218164bef0dce9d789560c532f4271d66159e6d51e4e89766491740229f94","sha512":"261d873aa45236df4d5f0aa00c2cfd78a69909435b599c9feb914bb260c36ae1977875095f261bf6c5b34351b61e491017b607c314fba348cca9f2851508910d","ssdeep":"192:M4gM6B68QEsg6+9EiZfYG/lhjTNWn+S3sBT4fCT3cXXqroor2:M4gM6VL/lHW+ssqCTMKA","tlshash":"7322c7da33a6f07343af95e7906f4004f17984a9145e141cd3aca8eb2c394ae85e7f76","first_seen":"2026-06-18T07:55:58.97936Z","last_seen":"2026-10-11T00:10:53.73442Z","times_seen":2,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0p76cqyj2m-94.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.602Z","timestamp":1791677052602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0p76cqyj2m-94.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"25e46-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":155206,"size_decoded":49612,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33547)","md5":"a26c7720a16cf26d6b2975c416f4e8ee","sha1":"460579d4ad060436ca4771a4c812492395f2b100","sha256":"9b63f316502174e4120f39362625f930faf57ac90eba6df8a73b3c717a5828c9","sha512":"1005371a1d7386fb4ac7fdea4de992a315d89d10ac4c19baa8a48ca09c68234bfc540f566fcad3a650fe413cbca7a1f6cc8445c987b323bd42a8233fc5f63941","ssdeep":"3072:w0tnlPVR/guA4M9TjUyDVtt43ot/EXtDTcd:w0qLt43c/EXtM","tlshash":"84e3f995b351712587cb52d9c06f0701ab3f29e8204d402db77dadcb296088a66fff7a","first_seen":"2026-06-18T07:55:58.984032Z","last_seen":"2026-10-11T00:10:53.738027Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/about?_rsc=eqsiq","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:16.201Z","timestamp":1791677056201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/about?_rsc=eqsiq HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/about\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/about\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/about\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":224,"size_decoded":734,"mime_type":"text/x-component","magic":"ASCII text","md5":"ac520ad76df98895d203d41085dea308","sha1":"38434e7cb5d240882b48c24eb705568e6a2658f1","sha256":"01ec7f445911802861501974b43c023d0812ca2cfb80d428ece9cb16b6a76bec","sha512":"43df59cfe1cb00b5d38a18b220a124f7f856dd9cf8c90841c7db3dcd63b560891b3324a89dffce4f3899417fe79782ebcb1119408f79f963decc276ba88ca0f6","ssdeep":"","tlshash":"47d09e36454619b71cbe10d1c02edc4b698d553723e95cf4c0921d2927a72755193292","first_seen":"2026-06-18T07:55:58.994563Z","last_seen":"2026-10-11T00:10:53.74132Z","times_seen":2,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/about?_rsc=1a28h","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:17.157Z","timestamp":1791677057157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/about?_rsc=1a28h HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_3MNX2DMYP6=GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0; _ga=GA1.1.1664316765.1791677056\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_3MNX2DMYP6","value":"GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1664316765.1791677056"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/about\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/about\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/about\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":6071,"size_decoded":2672,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4368)","md5":"24abc5cc03f3897036b59cc95492a8d7","sha1":"7434517224c934df18ff29ba9666dd3bb209d2a4","sha256":"c0a71debbccfff54028e795f7a2f7224475275de0318bc94e081ebc93cff45cc","sha512":"57cb4ef69c8f03ff442377708ce56c363cfe7b090742fce912b40aa4c8730339609e227a83347095248edf8b7ce979a3f88ca51e3f6737e2f477c1d7c0561179","ssdeep":"96:1CuNZBGxBFTd1+TlYXKEqX2NqmLMgvXflNAdE37K7qt7u74Dc9aSM:3cLlKZEdLMIXflNQE3W0q0Dc8","tlshash":"d3c1ef7f6a01ccbea7c74ac6245f2259b29c432feb84985bc24c8d2d06c67da6d91361","first_seen":"2026-10-11T00:10:53.743597Z","last_seen":"2026-10-11T00:10:53.743597Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en?_rsc=1a28h","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:17.555Z","timestamp":1791677057555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en?_rsc=1a28h HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_3MNX2DMYP6=GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0; _ga=GA1.1.1664316765.1791677056\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_3MNX2DMYP6","value":"GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1664316765.1791677056"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:17 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":6277,"size_decoded":2732,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4382)","md5":"d791152ff53cfa98d92e74a4ab5097e7","sha1":"5afe613a932f59028d53c1a97b6bae6f0d161d47","sha256":"f5f8cb18de67f35e8c259d62702075e5e2f2788de64209951210ad69da284ecb","sha512":"250193d6226548cb282e265b22cc676e47c25679cad0176dda57c95bce98d7b949bdd0925d2ddaeb18f765243245634520bcde674c06ae4f53a395feb43ee5d3","ssdeep":"96:1CSU0BGTzTCT3V+TlYXKEqX2Nqm38kzv/WfnNAdE37K7qt7u7WFcUDzozi6:AR03VlKZEd38w/WfnNQE3W0q+5DV6","tlshash":"d6d1027f6a01ccbfa7c74ac6144f225e769d432beb44a95ac18c8c1a0bc77da1dd03a1","first_seen":"2026-10-11T00:10:53.747107Z","last_seen":"2026-10-11T00:10:53.747107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0lhzxqgnye6b1.css","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.581Z","timestamp":1791677052581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0lhzxqgnye6b1.css HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"bfff-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":49151,"size_decoded":9832,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (47039)","md5":"26e38a51ccd59bd1b4a8579f64e6278c","sha1":"2bb760d46792716ed7180a4046d7f0acb422479b","sha256":"667ec022c615b89eeb6e1abbdd70082a5a16983ca361f46ebaa125386d1d21f4","sha512":"971122d2cee33e1854adafa51f10965ce5687960bde4fed68df9f76d17dc1ae14f03958274c381d0061a9c6f8a2916f2f4b0326148e658aa555a85ea5f130f84","ssdeep":"384:+nOC+QZ59j1XSc4+1zy2jycLAsGACgbx/e/HcrHpKC35Z7xKe:+BxXb4+J/CVcrHpNNQe","tlshash":"ff23821da659543b7d2794f9e29cbd9ca41bb1c0ee3a5bf6bc82121097e22f72d53300","first_seen":"2026-06-18T07:55:58.996314Z","last_seen":"2026-10-11T00:10:53.749294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:15.630Z","timestamp":1791677055630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2 HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 04 May 2026 04:49:08 GMT\r\naccept-ranges: bytes\r\netag: W/\"bd30-19df15191a0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":48432,"size_decoded":48752,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-10-11T01:31:28.528447Z","times_seen":110362,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":487,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/11-52pcqdxpe2.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.592Z","timestamp":1791677052592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/11-52pcqdxpe2.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:08 GMT\r\naccept-ranges: bytes\r\netag: W/\"ad7e-19df15191a0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":44414,"size_decoded":9609,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24405)","md5":"c0580cbd01241b8ef932c77521c07e9a","sha1":"a620ab2043cd5ff2756a4eb8dfa1d7790dbcc128","sha256":"1db04b9f9abe4488870b8bf5d44ffa5841304df9f0bd13c758abeceb4a6bba7a","sha512":"3ef66258503d11dc014da72b6a9067126c9ba5dbd61a193b24db8d8af38bde1aeb29326c5727084dde166e0d52314ac97f3ac2f62b63ae93fecfea048b1617a6","ssdeep":"384:87r6dkTd9KjBT4dZkTdIpoubIBqjac/s+rPYjDExpCkKMny1V0UGewQhxHAlweql:DQv8Ioukpc/s+zYXExp7ly1V0UgI","tlshash":"a713d8b132d4faa3539341e4e43f2016f2780d7520ad6470a7e89c9f754c88da6befa5","first_seen":"2026-06-18T07:55:58.983103Z","last_seen":"2026-10-11T00:10:53.802989Z","times_seen":2,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0~~qvy0b01dsc.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.598Z","timestamp":1791677052598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0~~qvy0b01dsc.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:08 GMT\r\naccept-ranges: bytes\r\netag: W/\"d577-19df15191a0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":54647,"size_decoded":13257,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54645), with no line terminators","md5":"3e1a61abb035442a6dc3f83b9e98e90b","sha1":"37d93775926bce3f7385aa4b4a353da983373ffc","sha256":"2518221d66f3ecbcc1611e5436f0f465ea45194516c4d6c80977c79211277ac2","sha512":"569b1b7f99e9b486ecee686637afc53ff44a22db3311375429b54e04c9e2c43418375ff68469ea27ef4f4d6a5cadc8cb76b191b76e88cd100bf3cb47dac84695","ssdeep":"384:i6AWst5gWTnDYV3uXeqbkCdeUtdaUmzlmuNf9zXYpDuYNb4xzpk81BZTDxJRiGR7:RAWstOoakEXqD9YhMF1kwCDFZLnqXN+V","tlshash":"1d33d9b53295faa302db91d9d0370012f27c0d71309d64b4b394d8af395dd8a92faf6a","first_seen":"2026-06-18T07:55:58.973768Z","last_seen":"2026-10-11T00:10:53.807633Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/Logo.jpg","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:16.142Z","timestamp":1791677056142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /Logo.jpg HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=0\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 02 May 2026 17:25:44 GMT\r\naccept-ranges: bytes\r\netag: W/\"1e51f-19de9b989c0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\ncontent-length: 124191\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":124191,"size_decoded":124495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1084x1280, components 3","md5":"37e9b4c2f8171f99258a471cabf0ec2a","sha1":"215e8c09e21bd56efd745f4655665ee7fa97badc","sha256":"9ea94ee07f882e91e83d714ccf8f126f2f6736f140f283babc5f528e32070cda","sha512":"d1c80013bee2820d5856c4d59fb35acc9501fadaa10e15dc9e2a17e1bdd158f04e45da4643521da04dd739b9efb5820083d7974731928b14b900b70ac9b7857b","ssdeep":"3072:0af5IGTj9FyE1CbfRUs73JG+mKXggqyZqCJTx6nSGk95Q:RVFy6CbfHZG+JQ+jTkSGk95Q","tlshash":"4ac302f017ec9585c58427729e5d691b893c2c4aabbac3f3c2a62b350f1e57273d15e0","first_seen":"2026-06-18T07:55:58.993511Z","last_seen":"2026-10-11T00:10:53.811773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.578Z","timestamp":1791677052578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2 HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 04 May 2026 04:49:08 GMT\r\naccept-ranges: bytes\r\netag: W/\"bd30-19df15191a0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":48432,"size_decoded":48752,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-10-11T01:31:28.528447Z","times_seen":110362,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/08fdm9qygxsn5.css","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.580Z","timestamp":1791677052580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/08fdm9qygxsn5.css HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"195b-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6491,"size_decoded":2444,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4379)","md5":"97f0940ec6520f749f6ebf90984debad","sha1":"81a598ad0796d87e5af8dec64c6561d5db8b761b","sha256":"979c1f5cc71619b5ba9d450a26b4b42c74558e0fa18609e3d4fa29f2379022a8","sha512":"b96f9855b3f650ed2bd36086ffdca160d825483e1b97d44bcb4d9e19489e83e36ee0aed88d2e0d0907783915455d676560c2001787d8f4b6e8fa9e3597b9b32d","ssdeep":"96:O4ipX96qhjO9LFbptPAqjq7fJhJlpSxZOqtRpfqFOKp:+t75O9LFbptPAqjsfJ7cZOcRsFOKp","tlshash":"47d10438111b6845e3f789a331ce2d837c0d913117996227a92d6e948eefa7f27b4364","first_seen":"2026-06-18T07:55:58.999518Z","last_seen":"2026-10-11T00:10:53.819486Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-3MNX2DMYP6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.872Z","timestamp":1791677052872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-3MNX2DMYP6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nexpires: Sun, 11 Oct 2026 00:04:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179628\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533950,"size_decoded":180232,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"41e35f915d8d0bbdf85e53e3f1a1ba38","sha1":"7ebafb9c9363103f83aa3d7f05b14e1b43642f2d","sha256":"f802d495606a8a8dae2b4595b539b9f60ac439da85f3252861c4737c00ae04d1","sha512":"29b992b98dfb460c6b84c60ce0646c3f34b9b68746ffd19fe966a37b29a8cf37f4a3186c0113397ad096b487c32cd3bff4c9fd99e1e1301ac7d34b39a59d731a","ssdeep":"6144:zb3CWSKqKJ2qF6F4V2H7s/c0wb0EHa3EE86J/BLiSiHwp2Wwp:zFzIEaKoSiQ+","tlshash":"24b409ceb3d6742253a6f078903f01cba57b29a2b45cc896b189dce02e7465a4137f7d","first_seen":"2026-10-11T00:10:53.82249Z","last_seen":"2026-10-11T00:10:53.82249Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":48,"receive":64,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/blog?_rsc=1a28h","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:17.150Z","timestamp":1791677057150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/blog?_rsc=1a28h HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_3MNX2DMYP6=GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0; _ga=GA1.1.1664316765.1791677056\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_3MNX2DMYP6","value":"GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1664316765.1791677056"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/blog\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/blog\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/blog\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":6000,"size_decoded":2646,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4381)","md5":"e26273e0f70207b574dce8fcb18fee29","sha1":"bcbf8a999d269303100319f52ec43477635bbc7d","sha256":"74988abf282c177588424a338ca8eb18773d5f1d88c30b3696cce3ca766c84d4","sha512":"85641e089757e1c34342d35558b1f569f9776479f1e30f70fdcabbd946bddb50b7cdc0dadcd296ffe0fd6a148544ca2cc63f51c63397895946d22c5fb86c4205","ssdeep":"96:1C5ABuzFBGcBQ/T+oq+TlYXKEqX2Nqmfw9vMNfkNAdE37K7qt7u7bDgkuihR:tYq7+VlKZEdfw1MNfkNQE3W0qnD7RR","tlshash":"fec1fe7f6a01dcbf97c74ac6145f220eb29c432feb54ac5ac14c8d1a0ac679b2dd43a1","first_seen":"2026-10-11T00:10:53.824777Z","last_seen":"2026-10-11T00:10:53.824777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:04:11.809Z","timestamp":1791677051809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/\u003e; rel=\"alternate\"; hreflang=\"x-default\", \u003c/_next/static/media/3fd1b3eda9c5392f-s.p.0p-f7yd42daun.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/chunks/08fdm9qygxsn5.css\u003e; rel=preload; as=\"style\", \u003c/_next/static/chunks/0lhzxqgnye6b1.css\u003e; rel=preload; as=\"style\"\r\nx-powered-by: Next.js, ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:11 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":159648,"size_decoded":31916,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65490), with no line terminators","md5":"6e7cd7c53b7101cbee366d4e41b129a4","sha1":"3c8e3cf76264ce6910cfffd530eb50deacb50799","sha256":"22d2f4fc70ef854ba49ae2a409cbb3ce6cb5c0640083939f2a265de1a896ab41","sha512":"54957e3a99ed66f41a1adda8c0b329a7e81b3610f4033a1df4b1a67ba340708784185fe98093389d2010767ba2079f42b726029415dfa6ac85c76484e2bee79c","ssdeep":"1536:/AWjBBMsMiMP4B4kkkkCkkkkykkkkYkkkkMkkkk0bkkkklLEYkyMy7wQmQ0TavDd:/AWL1P6w9zRQ5y8no","tlshash":"93f31a356608ee2ca5478ed8b7babf35526dc165e65bc42ca2ecc43113c3c78da676c0","first_seen":"2026-06-18T07:55:58.998353Z","last_seen":"2026-10-11T00:10:53.826496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/media/3fd1b3eda9c5392f-s.p.0p-f7yd42daun.woff2","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.576Z","timestamp":1791677052576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/media/3fd1b3eda9c5392f-s.p.0p-f7yd42daun.woff2 HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"28908-19df15189d0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\ncontent-length: 166152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":166152,"size_decoded":166474,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 166152, version 1.0","md5":"593878768b809251b8aea93f1831e86c","sha1":"a97c746f0f0a4878263fce96b5a17c0812f57e18","sha256":"69cdf0bf005fdc9cc13fb5a8581697eb9ba8f761aeaf255fc717d14c62c38891","sha512":"8bc10830d6b8da6b0096cd22485e222564ffe7199f4070077d5f6526bf579459870ec67728d299dd9c530d252db756186b1a7db1f3ee14bf560879eb3f8d4a86","ssdeep":"3072:zMQimf82CqFxBsbCu1rMO9+N+ldAgki7FGWw8rV46aKX+mULC:zzCq2fg0AgkiAWDV46ac+mU2","tlshash":"f0f312b51dd303abfdfb3ed052836e569e46422ff54422a7e3c43e662246131b9364d8","first_seen":"2025-09-28T11:50:12.18392Z","last_seen":"2026-10-11T00:10:53.83253Z","times_seen":602,"resource_available":false,"data":null}},"time_used":2203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1135,"receive":1068,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/projects?_rsc=1a28h","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:17.075Z","timestamp":1791677057075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/projects?_rsc=1a28h HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_3MNX2DMYP6=GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0; _ga=GA1.1.1664316765.1791677056\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_3MNX2DMYP6","value":"GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1664316765.1791677056"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/projects\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/projects\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/projects\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6114,"size_decoded":2697,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4327)","md5":"7ddefa741e576dbf847360ae601c474f","sha1":"88a411acd2964e99496aa0d33ae2140b2e7a4805","sha256":"f3d9031434cdf630a88c714d43ea6acfdbf01a1df06d42e59030e70848bd6b4a","sha512":"0d151ef53708afb08f677fb61be77cd1ebc1acc6577ee07a6a08610ae0c2d3e6f437d08e0450fc73b847a6790be56167c46b5f5083a647acc323cfa237af2a98","ssdeep":"96:1CXBxBGOBqjJTbf+TlYXKEqX2NqmTIPvmjnfqNAdE37K7qt7u7xDIJeqGjp:QCbflKZEdTIHAfqNQE3W0q1DI+","tlshash":"bac1017faa01ccbfe7c74ac5145f620db68d432feb44a95bc54c8c1d06c6b9a5c913a1","first_seen":"2026-10-11T00:10:53.833983Z","last_seen":"2026-10-11T00:10:53.833983Z","times_seen":1,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/en/contact?_rsc=1a28h","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:17.143Z","timestamp":1791677057143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /en/contact?_rsc=1a28h HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://alrafahfire.com/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_3MNX2DMYP6=GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0; _ga=GA1.1.1664316765.1791677056\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_3MNX2DMYP6","value":"GS2.1.s1791677056$o1$g0$t1791677056$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1664316765.1791677056"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/x-component\r\ncontent-encoding: gzip\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nlink: \u003chttp://alrafahfire.com/en/contact\u003e; rel=\"alternate\"; hreflang=\"en\", \u003chttp://alrafahfire.com/ar/contact\u003e; rel=\"alternate\"; hreflang=\"ar\", \u003chttp://alrafahfire.com/contact\u003e; rel=\"alternate\"; hreflang=\"x-default\"\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:16 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6109,"size_decoded":2671,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (4326)","md5":"3610a2ae9a8da5aeeeb2c6ee9f2181c6","sha1":"a7e04a6b647b6ca06a1a43a87d0201760aa377f1","sha256":"21334bd6f92e258084c3bb24bb11ea48482745c26f912b8e0477ae5e544cbf4e","sha512":"c6bfeb4a8670be5b3443d29f3d4841d25e77dfdfc988684d835ef0c492d1afa184f25ad4e36b7fe8dc9a637fa8b78cd89d254baa3644636b7209a61a91ec4174","ssdeep":"96:1CDvkaHBGJBhzTS+TlYXKEqX2Nqm9e8vdpf0NAdE37K7qt7u7IDIJet9L:brSlKZEd9ek/f0NQE3W0qkDI2","tlshash":"abc10f7f6a01dcbea7c34ac5245f661e729c432feb449d5ac24c8c1e07c67da6c903a1","first_seen":"2026-10-11T00:10:53.837304Z","last_seen":"2026-10-11T00:10:53.837304Z","times_seen":1,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0j60s563~3l.i.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.587Z","timestamp":1791677052587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0j60s563~3l.i.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"215d8-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":136664,"size_decoded":37531,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"66d8630da88e51f85e1331fe7bb2217c","sha1":"f09f0201474714f3b906ba4c1489ac2482fb8cac","sha256":"4122dd6eef5d81f972cc2f6132d9723ccf549d16ab887e1b9153aed19af19972","sha512":"6771087cd7bae6056284c1cbe01a4f5a57314c6684474e9d66d6bf1aab5ed62453fea8ab047aa0a33172287216a2112c99b4180d58b8699f3e4b442c92f4d3b2","ssdeep":"1536:TFhA+g9ME/bx6sgodpZsIdIQEZOzivl/Q4pzs/psnyaYbz+Wrpe54I02xHS0ESXB:Ty7bxaoTZNcZOzivlXNYbSWM5p02HvXB","tlshash":"8bd3e6f935d1f482076b50aac03f0006f22c4d77189e6860e3e5edda756465de2b3faa","first_seen":"2026-06-18T07:55:59.000776Z","last_seen":"2026-10-11T00:10:53.839658Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/image?url=%2FLogo.jpg\u0026w=64\u0026q=75","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.891Z","timestamp":1791677052891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/image?url=%2FLogo.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-type: image/webp\r\netag: w9xFItT8dHv5Dnu_8IB6obkiCLzmffpkiGmmMGnXFgo\r\nvary: Accept\r\nserver: Microsoft-IIS/10.0\r\ncontent-disposition: attachment; filename=\"Logo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\ncontent-length: 1836\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1836,"size_decoded":2275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x76, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e502452fe99d17838e87e69595be184","sha1":"2efa317f0b7641be01f81a1d09b20e8c7ee38774","sha256":"c3dc4522d4fc747bf90e7bbff0807aa1b92208bce67dfa648869a63069d7160a","sha512":"db4633569ae9da6339e1427866861088361580ca8cab7be3e54271aa61b26426b3deec226a58d896c84ffde29d900d89ee5bd0252dffa7ff1ddc484adb8f96c7","ssdeep":"","tlshash":"8c31f7bb6531cb4092b97a69abecae1c4ae431945270b436013eec32a7d205b3b1809d","first_seen":"2026-06-18T07:55:58.988586Z","last_seen":"2026-10-11T00:10:53.842469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/Logo.jpg","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:16.144Z","timestamp":1791677056144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /Logo.jpg HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=0\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 02 May 2026 17:25:44 GMT\r\naccept-ranges: bytes\r\netag: W/\"1e51f-19de9b989c0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:15 GMT\r\ncontent-length: 124191\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":124191,"size_decoded":124495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1084x1280, components 3","md5":"37e9b4c2f8171f99258a471cabf0ec2a","sha1":"215e8c09e21bd56efd745f4655665ee7fa97badc","sha256":"9ea94ee07f882e91e83d714ccf8f126f2f6736f140f283babc5f528e32070cda","sha512":"d1c80013bee2820d5856c4d59fb35acc9501fadaa10e15dc9e2a17e1bdd158f04e45da4643521da04dd739b9efb5820083d7974731928b14b900b70ac9b7857b","ssdeep":"3072:0af5IGTj9FyE1CbfRUs73JG+mKXggqyZqCJTx6nSGk95Q:RVFy6CbfHZG+JQ+jTkSGk95Q","tlshash":"4ac302f017ec9585c58427729e5d691b893c2c4aabbac3f3c2a62b350f1e57273d15e0","first_seen":"2026-06-18T07:55:58.993511Z","last_seen":"2026-10-11T00:10:53.811773Z","times_seen":2,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:04:10.288Z","timestamp":1791677050288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://alrafahfire.com/en\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:11 GMT\r\ncontent-length: 149\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T01:43:26.352283Z","times_seen":19014451,"resource_available":true,"data":null}},"time_used":1510,"timings":{"blocked":-1,"dns":42,"connect":134,"send":0,"wait":267,"receive":0,"ssl":1067},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/0064ss~rx1gmz.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.584Z","timestamp":1791677052584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/0064ss~rx1gmz.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"7ac1-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":31425,"size_decoded":9296,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31425), with no line terminators","md5":"3c9d28b0b38cfc173baffc456d1a36a0","sha1":"4bf362db8b20049b49f142f80d67bd23a141e439","sha256":"b5c90e357c405c23cd3fbf5c06680b4c6f2b45de39685abe9b630253d77384b4","sha512":"d08091965f3debffe58995f0f807fd7fcde49d0c2ff1ac79088fd803ff3a1ad893ea4eef6b4572fb99864e5bd90fa1f62610c2ae034572b79989027d7210b5bd","ssdeep":"384:t+FjFcxl/akqleEZQKZTds6YCHSWvfrvf8J6otgG4uaFQW9Uiet6ebPp1NRBYjY8:t8jo/aZlKUds6YCzvfrFUNRBqdnFvZ","tlshash":"3ee2a4a971d5f4910b9354b5803f501bf23e0db6286da0a4e3e2dce9b9b054dd133f9a","first_seen":"2026-06-18T07:55:58.978443Z","last_seen":"2026-10-11T00:10:53.850367Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/09cnb15o2pl2~.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.605Z","timestamp":1791677052605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/09cnb15o2pl2~.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"6aa5-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":27301,"size_decoded":8434,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27283), with no line terminators","md5":"38a1dd1ee6fac489673033761267150b","sha1":"69dc9b8ab81b37efd73d1d94a339a609292fbf52","sha256":"6bcc8a71abae48d6b4017c59621574c93b7ec215bafa2d5250300f82265b0a24","sha512":"76cef257c0ef7ab3f42632eca483141d5131c69d1eef95c60f45ce9c5aef79d73daec9e7a36fdddd18c40bdafb5a2c923ada0778d7414b83593920e428276a13","ssdeep":"384:2lur5/Kd9LKA3eoPyMK+A0aZYQQrZ5MkMmSAqLL/o07qMGDEYDW36m4Qj:28Ed9LKA3nPaBbTGZ5MtmfqqBEYC36kj","tlshash":"6dc2a544a184afdcb56b05d8aa6fd00c612f6facdf1fcc68b5fc6c250a41488b613bc9","first_seen":"2026-06-18T07:55:58.985059Z","last_seen":"2026-10-11T00:10:53.852069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alrafahfire.com/_next/static/chunks/07us~nenmv.fl.js","fqdn":"alrafahfire.com","domain":"alrafahfire.com","tld":"com"},"ip":{"addr":"70.39.90.16","port":443,"asn":46844,"as":"SHARKTECH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alrafahfire.com/en","date":"2026-10-11T00:04:12.869Z","timestamp":1791677052869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alrafahfire.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 21:58:56 GMT","end":"Tue, 24 Nov 2026 21:58:55 GMT"},"fingerprint":{"sha1":"28:A0:B7:47:95:83:63:9B:AA:99:D5:E5:EE:07:5C:96:F3:62:5E:68","sha256":"A4:04:B7:AD:15:1A:9E:74:F9:69:E8:08:D5:FB:B7:70:C2:CF:B7:FE:76:C6:64:1E:CB:08:85:52:3E:45:9E:AE"}}},"request":{"raw":"GET /_next/static/chunks/07us~nenmv.fl.js HTTP/1.1\r\nHost: alrafahfire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://alrafahfire.com/en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 04 May 2026 04:49:06 GMT\r\naccept-ranges: bytes\r\netag: W/\"51c9-19df15189d0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 11 Oct 2026 00:04:12 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20937,"size_decoded":7537,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20937), with no line terminators","md5":"5312b66978bde7ea5d68bcb229f88210","sha1":"3857fc04967e4d5856545e2bfbb0f00916c868ff","sha256":"008684f7b9e68f5402de84e1ff865e7fd0c82ce6c7e9a4bbbef60392d91d832e","sha512":"726e360f02317297e3dfc0338077513ae73300d35902ec55e1f87d63f4d13bf304486b5fbb54fe9c01c8fe5f2ac5c6f98cd23d08610003c2e781144f8a4a9908","ssdeep":"384:N1Fuqy+nD+RkZeJXe3aZUWvL5bO3VgmIQ0QTsm1U6K:Zuqy+nD+RkZeJX+KUWT6Yt","tlshash":"2692c7c17281b678979e8585c53bc02cb73f7a2c640e103cf5ba99a52a55290f2f3fb5","first_seen":"2026-06-18T07:55:59.016719Z","last_seen":"2026-10-11T00:10:53.854208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"alrafahfire.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}