{"report_id":"d6ff3b2c-a9d0-4de4-924b-f45f64a94a10","version":6,"status":"done","tags":[],"date":"2025-07-12T23:35:52Z","url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"title":"Suspected phishing site | Cloudflare"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T23:35:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"morocco-presale.com","ip":{"addr":"172.67.187.167","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":25,"request_count":25,"received_data":55122,"sent_data":10154,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-07-09T16:10:05.828724Z","alert_count":0,"request_count":9,"received_data":604203,"sent_data":6386,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T08:07:43.117448Z","times_seen":143894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e778ba59f06a259050976ee003049626","sha1":"3e4227cfd1f1b39503ec1339e777a2c9d0f3cc29","sha256":"2f1a5675e8ff5f858a9be171c561628c55053ac0ce71e89918eb608bc65af968","sha512":"330af703a77df333b26bc82378fdc0d76555d89e20ae356fd3a557557e74d7d7e43a19745f9c756f9d117dc81062e0a7971635d0b6f622e38ff0e7a70477b7c9","ssdeep":"3:N/BKL1XPWdW8:eL12","tlshash":"b55504c05c40f0f11414cc00d1701415d4451c04111fdc01705d04d457301050015545","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.76142Z","last_seen":"2025-07-12T23:35:58.76142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cac8ddff3d3fdea58c9455ac02f95a68","sha1":"1fba41fd37f5bd91a85f54e79469aa4477aeea10","sha256":"ecea67e895ceb92a04265106ac08798a1c6ed8d8eaf1e7a09fd7463fe73ee257","sha512":"ae23f1e57db620a0fb0a4662fbfa06fb3d21aa65ef5d895c5647a55ea02ca3deeccc3f5f11d950d924e178e9c4e02d49c61b705661fd83dc8616796ab7415a75","ssdeep":"3:N/BKL1XPWdXdJn:eL1gLn","tlshash":"995504c054c170f10414cc00d150141554450c04101f5401705d05d45730105001354c","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.762553Z","last_seen":"2025-07-12T23:35:58.762553Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab1ac4cf0f484cc9f859c0a7983353e0","sha1":"2da142b1135bd10cdbed4a7353e4483acc30ebe9","sha256":"50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324","sha512":"9e2901fe2c4505797cbc7d3853280cb3450188bd0cba66ffe5c8055687578c849b31a74c6b56881bb07c195217e9604a88ba6995a4275419ca076424ebe88b0a","ssdeep":"","tlshash":"73d0a72677ee14a8129bb031154e2705212180024002870d7a1c92359fe0e2708259e3","size":210,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-11T10:05:57.20857Z","times_seen":382540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"77de0d92bb6ce8e5eebb66e738d3ed19","sha1":"9db841ed6e67e212ae9a58d328aea3c68c1c5f80","sha256":"70fbf148d88c16535194230e216d1833cf7496b27d0f8dd0d15dded5d18244f2","sha512":"6c1f025c5920d41cd7950b7c92f130251d37dc5aac80c325a3cc5de43c35814a4fce9c0249012d850ba224771ef8e5e5c32d394e1207f08dc097437921ae4218","ssdeep":"3:N/BKL1XPWdWZK:eL1vK","tlshash":"7c5504c455c0f0f41414c500d5d11c5554451c04101fdc01705d04d457311450111545","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.764243Z","last_seen":"2025-07-12T23:35:58.764243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f356691180d344efc2609f2763f3622","sha1":"bf1222f5a72caf1ef98e6cc577133e00b371edc9","sha256":"2f8f7d5d9d8d57b74e3a0f5e6bce54ac1760bf0c4d2bd890224d66c898808dcd","sha512":"99ed138b67bc62c749d695b2f1762bc4c9ffbbaa949258d44f5ec74298948c925f680bebe16e5dd040a6ba45c5b9a81f7951b5235eee113f07fc5e3366bb12a4","ssdeep":"","tlshash":"1b610989d19cc36ed75d7a6cd609b2413e21024e501970756b81e40bb15acf781e4f5c","size":3185,"data":"","first_seen":"2025-07-12T23:35:58.765084Z","last_seen":"2025-07-12T23:35:58.765084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7bd27860f0170ad45b25c5525bf32208","sha1":"0702fd96282ea64d50453484dcbefb176e42d257","sha256":"ffeb1afca0360a33b2c416ef59543052a39d631caacb58cf76cde680f53dbc3a","sha512":"2b32e0489ffeaced1a6beca79bdef0773ef4aa70ff81d448ac779ebd00210ce4efde76e7a55f9627277357cf0f7f4235aa14c80750258b2cb2c8c554c651e70e","ssdeep":"3:N/BKL1XPWdW4Mn:eL1R","tlshash":"615504c05440f0f0541cc401d150141554450c04101fdc01715d14d4d73050500115c5","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.767343Z","last_seen":"2025-07-12T23:35:58.767343Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"707a05535c9f035d06963e6bd60b1bad","sha1":"3dd101c54d1bd9ce2a3ee2d03284f95acde594da","sha256":"ac0d4e7a101b3dca7dabdbb9c04424dd776496494730d046391ee590f3502713","sha512":"3c7b360f8d61587c1e4c9c3ac96b49d2aba547bb45c9b6a61ced69ba3cc7b4a855b42f5c414f44d46066358a58e33a781ed95e7e1c9e115e25495c83491f54f9","ssdeep":"768:ECb7su2HMkPa/rnQhYA2mXvyBjg5Z/YIJRW+Bs3TC8LC7wRaY1uFepBcYxcZIr1g:F2skPa/rnQ+s9Z5Jd4Cki","tlshash":"04232c547156787227d980e0717ba7437325793ae94ccc50e823c96536acdcad233fba","size":48828,"data":"","first_seen":"2025-07-10T21:00:19.013192Z","last_seen":"2025-07-16T14:44:30.262384Z","times_seen":7583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95e45b67eb52712b\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d5fdbea85955d08d1864b9a8e41971f","sha1":"9280b37b6405d7832e2563dfa3ceee49915b0da5","sha256":"34e33c021bd512d77ab03154b4b063e7e52dfdb50b7304034e10cde4e839814c","sha512":"ebb58413a846662cd12593aafd7e7203df5c9f5bf99dd590ed1ad178f209e752e53b0c0d7299945bc00c3feeb3e0e91521f1f3c0dc1a9fd1803686c47925b767","ssdeep":"3072:g9gOgVD8mi6NTsgWynzU4Xey+NhPRn6kuJrsT:j3VD8mi6NTsgWynzU4Xey+NhPR6vw","tlshash":"88e3e78a39cdb551432270f9053729dbe2ea6cc870445e0cea20a5e47cd2b58797febd","size":153981,"data":"","first_seen":"2025-07-12T23:35:58.753168Z","last_seen":"2025-07-12T23:35:58.753168Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a2f4e168925e97f8d2906ab86700d126","sha1":"77e1a1bfe6ee0acda4b6ab2225530ed8e531e7d1","sha256":"1f85a0cb5c59af467a27239c4408b4ea8aba8b95ec9562051015b109a4eca45f","sha512":"09062c4f06b9dc567e7be0d7a1cb92cf3439f2e4c477eaa31b2dfe1c80c236b769ddbee45c1407138f7d11efe9e343151e391ec4b25c91e68f6cdd31dec80e11","ssdeep":"3:N/BKL1XPWdWVU:eL1jU","tlshash":"2f5504c054c0f0f01454c400d170141554c50c04101fdc01705d0cd457305050053545","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.769534Z","last_seen":"2025-07-12T23:35:58.769534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34df99ef0602560c811e58e4711c99e3","sha1":"88dea8841635da3e1130ce19e3718ceb17a95a35","sha256":"18a52fd2cc16c86bcba28796b0e231144f219cc87e049c41d9d378b880a42fba","sha512":"df8104390e5066c45a916d84fbfe2f754d6a94cf429dd6cf62e207193f298db51f17567e50c87bc2842e2a0888ed75fc564066ec863dfcbf9b4362b9bcc8a7bc","ssdeep":"","tlshash":"ebb0929f218316b4179e3a76d02a43667620501244199800fd1ca6948f9195a808bd4d","size":115,"data":"","first_seen":"2025-04-28T14:01:07.115316Z","last_seen":"2026-08-11T10:05:57.245655Z","times_seen":141412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-08-12T03:58:08.566668Z","times_seen":563070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"959eb5535af7b703a71eea6d6dc7d011","sha1":"f4ac95c0c2060a678d9e1249dd42467c94b70d8b","sha256":"61a5159b77d3493ff23d307b99b6b34731a36f361671a55543f4ff43a443c842","sha512":"bbf20507c20d378b28dec015eb465fa7dc1a98f5853da9fdd6a791458ba9a00b9ea81e923eaebc6724127e4f4894c7eb97b6ba37d1090d60778f89d0106287a5","ssdeep":"3:N/BKL1XPWdWci:eL1/","tlshash":"0e5504c05440f0f43414c400d1d0141554455c04111fdc03715d04d457301050011555","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.790891Z","last_seen":"2025-07-12T23:35:58.790891Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"56f3c3f0fa8eb18a5e52d518a4e2b7bf","sha1":"a209a24f88453ee252cebb34f39e25384e231acc","sha256":"7bb8eaa6a6a167653e58d6bb5b63670576bdee1ed7023f8bf5c793afdaffb4db","sha512":"3f0520a4f2ca82b544ef9cb5f62a07e4d280a361064620e3220303e76ba630e3d53c6398b9ed7d1e4cf28d62f88e4b9ad9744f9e9bf3e0bfb34405103575161d","ssdeep":"3:N/BKL1XPWdW9U:eL1LU","tlshash":"aa5504c054c0f0f01414cc00d150343554cd0c04111fdc01705d04d457341050011545","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.802688Z","last_seen":"2025-07-12T23:35:58.802688Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e643cd5d07a3f7c395bd5ccedf230d1b","sha1":"c87e766d337ee16644f70936601a6bd53a32fce9","sha256":"dfcb1d1e4c8203b0483fdf6082dee7bccda7aab8f7269bffecaa3b2ec3c4f5e2","sha512":"c3865e179100a48161395fcfbc1d531e65dcefabe1e21fc979d2816d1e496112af873b233f06eed0c6ddc450b114651d57855fec0efd93e52d62dd45bba921ec","ssdeep":"3:N/BKL1XPWdWb:eL11","tlshash":"3d5504c05c40f0f01414cc00d1d0341574450c44301fdc01705d04d457341054011547","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.805401Z","last_seen":"2025-07-12T23:35:58.805401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"381260f4e4b0d0fb2381e014f6f03592","sha1":"894f97459a6aa704fa0b7fa92c66e97b8e4ea0ed","sha256":"bf47b3ad7f2357d8a54a27496a970a8217f0e9a3cfa313049e3e3cdf95f8743f","sha512":"acb80243f632e30af958bc051c291051a2848506515347ea7d0db08479f5ae4e413aa8989bfe985ac3be0c522ddca4225147d6e70cbfb006279f0f53d82f57d2","ssdeep":"3:N/BKL1XPWdRUBU:eL1mUBU","tlshash":"b25504d0d44470f00414c500d150141754450c04101f5401705d0dd4573310f0113554","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.807625Z","last_seen":"2025-07-12T23:35:58.807625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4ab6d0fc9750fd323610a571b32cb8f9","sha1":"558074c5e4a416a52be433f8dbf4554b2c232890","sha256":"fbf05d63df60d4560b4166d1e6ea6fe34947f5c48de8eb1aeb853c21516294f0","sha512":"3492e849c4e3c176883be798abd5287a756794694375f24e71dd710fd6a7baf059b76cf476114d30a12d8d65e30febceffa28bed390a21fb4282578011c13565","ssdeep":"3:N/BKL1XPWdRRVHn:eL1mzHn","tlshash":"1d5504c0544070f00454cd00d150141d544d0c04105f5403705d04f4573034d011355c","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.809395Z","last_seen":"2025-07-12T23:35:58.809395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8d4acfd5ef96d7ad31cf483dc85b1161","sha1":"2bed8541dd9e552a3bdf16b6b1a6ee5dc2d05a2e","sha256":"92806a7e1ce753565cec605cbe2b4bce801855929a40e408d9b9e78554411dee","sha512":"0fca16b94e4b5e183251ca42863e8653b88ebea4ef5ca3c4965274cf4772c9af02bf91353d781196e867b88e2f5d4421168786d4fa4ca64fcb6cf0b493b48348","ssdeep":"3:N/BKL1XPWdWWXn:eL1un","tlshash":"ee5504c1d440f0f07414d400d150141d54450c04101fdc01705d04d457301050011545","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.810963Z","last_seen":"2025-07-12T23:35:58.810963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8ad5f027961d48652137e5a710f706bb","sha1":"c88076594366a49b15958e9eb4223e07afe27083","sha256":"a39d25ce9f3e467d80453674691b2d84378b80168750c7d0e54bb9f17d983fb6","sha512":"eab0ae0f1e82b2e4f5dc01dc3199bf544cbd2cafd542bb674c0cfba82dc40a2a1784857652c4e924256a97da40e1fdbae3dfee8b32725efd3ee78f0aaaeffcc1","ssdeep":"3:N/BKL1XPWdXSVh:eL1gSf","tlshash":"445504c054c071f00414c400d1501c1554470c04501f5d01705d04d4573034f005154c","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.814096Z","last_seen":"2025-07-12T23:35:58.814096Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6934d9d33cd2d0c005994e7d96d2e0d9","sha1":"96d89030c1473585f16ec7a52050b410e44dd332","sha256":"08c9b52f61fadf1eff6fb89169f1735fbae7bb583b23cb119d0e1a0151bac952","sha512":"64ff1127cfca45f7ab820ffa481a3af55570ab2d7b1b7e9d3c0309bd3b6783f6b8d10c8eb2224bc517613f82372722a443dc221398cd2e5b24594ebef1bf4359","ssdeep":"","tlshash":"cd1100000000000000000000000000000000000000000000300c000003000000000000","size":1000,"data":"","first_seen":"2025-03-02T18:12:34.22932Z","last_seen":"2026-06-07T08:07:43.117448Z","times_seen":143894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8496e8addf4e1809c832fe243e97b44b","sha1":"eebc78af699979b812b7800a43379d531f94e779","sha256":"1132f6168f5d12316d8392f901ec85ae4ea14682e46c1aa79293c0ab84e46649","sha512":"757f8aa59ce6d0f231b6610b9239b86069a9403f5e71da906b6830691e761b17e00d5b0302ba6f42aed6b8227ea261e409a9aff89b637b7edaa7ed0beb6467d4","ssdeep":"3:N/BKL1XPWdWQdSn:eL1qS","tlshash":"5a5504c05440f0f01414c400d1511c1554550c04511fdc41715d1cd457301050051545","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.817337Z","last_seen":"2025-07-12T23:35:58.817337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f6161217e242dffadf4241d174abcc","sha1":"304832d02caf7b8a45ea29c321993d7eba48be67","sha256":"390eefa5af21228aaab4bb7eb68043b2468a645b3c861aaba17b226cc8c05d95","sha512":"886e6c321c801fa26a1363e65eb9ddd6f15617044d57f2b458d235cb396119dbc35e216178258e47ed6a73ad9a6f558e12605621bb3bae8e463c56ae6f9f6d18","ssdeep":"","tlshash":"869004534011730005710337175555403335501310314c0437cdc1153f51f57cf05340","size":46,"data":"","first_seen":"2025-03-04T09:24:28.966015Z","last_seen":"2026-08-11T10:05:57.26542Z","times_seen":246321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f482dbe62f5a19327e20881c17542b8e","sha1":"5fd7ae9d5cc2c1e4a79440f72fc05c3118ca8560","sha256":"879091fcfa1ad4e8e1fa36e1c34b604902b42a93692694b161bd4e70751e0702","sha512":"cb18af704d01885461be061efc39f5d84201cf0dcd3e0a0ce12d73355e58c7e1a3392365c270d9a7b00790d8c059a0982fd6ae2373905742dc4e27b71015b3ce","ssdeep":"3:N/BKL1XPWdRULn:eL1mULn","tlshash":"6a5504d0d44470f01454cd00d150141554450c44101f5401745d14f4573110d05115d4","size":1337359,"data":"","first_seen":"2025-07-12T23:35:58.82084Z","last_seen":"2025-07-12T23:35:58.82084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-12T03:57:59.209198Z","times_seen":810695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-12T03:31:19.886258Z","times_seen":1037308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"morocco-presale.com/cdn-cgi/images/icon-exclamation.png?1376755637","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.409Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://morocco-presale.com/cdn-cgi/styles/cf.errors.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Jul 2025 23:35:26 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBTAX9aaTlyf3MsxqHYhNGRQeSwHcnFWXDBZ%2FGY%2BBseX8rTIOluJckXTfEEAVwv0YRdLBM0%2B1UewRsrL9YZqRFqUL9XtX6T57TvG9pKQtWpL\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 95e45b660f32b503-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"c33de66281e933259772399d10a6afe8","sha1":"b9f9d500f8814381451011d4dcf59cd2d90ad94f","sha256":"f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016","sha512":"5834fb9d66f550e6cecfe484b7b6a14f3fca795405dece8e652bd69ad917b94b6bbdcdf7639161b9c07f0d33eabd3e79580446b5867219f72f4fc43fd43b98c3","ssdeep":"","tlshash":"14f05c45c595e9f5a90330586311ca15ab7701c6276726c9d3854032a456482ca97f86","first_seen":"2023-04-12T19:44:04Z","last_seen":"2026-08-12T03:58:08.564392Z","times_seen":412687,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i091RMpVcTwI2%2BlDasjkEdNtI7YQaI7b%2FhtmXB9ufVo5%2FXRNbbG6y8l7Cl8Plcl7LJ0E3pYiqQs02VTBlN9y7aP4njB4hUKEhhfTbH%2B1lagu\"}]}\r\ncf-ray: 95e45b6a4c8856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/01a6b50f61fd/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /turnstile/v0/g/01a6b50f61fd/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 10 Jul 2025 13:50:19 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95e45b66caac712b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48827)","md5":"707a05535c9f035d06963e6bd60b1bad","sha1":"3dd101c54d1bd9ce2a3ee2d03284f95acde594da","sha256":"ac0d4e7a101b3dca7dabdbb9c04424dd776496494730d046391ee590f3502713","sha512":"3c7b360f8d61587c1e4c9c3ac96b49d2aba547bb45c9b6a61ced69ba3cc7b4a855b42f5c414f44d46066358a58e33a781ed95e7e1c9e115e25495c83491f54f9","ssdeep":"768:ECb7su2HMkPa/rnQhYA2mXvyBjg5Z/YIJRW+Bs3TC8LC7wRaY1uFepBcYxcZIr1g:F2skPa/rnQ+s9Z5Jd4Cki","tlshash":"04232c547156787227d980e0717ba7437325793ae94ccc50e823c96536acdcad233fba","first_seen":"2025-07-10T21:00:19.013192Z","last_seen":"2025-07-16T14:44:30.262384Z","times_seen":7583,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfJXsgpZpDu8xJbCf7CAivrtWs01GI4jblL5g7W0LC7YTu0Cpwrqx%2BI%2FmguhXT624KdctQ5KgQDlcD9Rl1a%2FY58cLOcFjAN1Mo12h3pRe3Ye\"}]}\r\ncf-ray: 95e45b699c0156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J466Y%2FMN0fT7iOIFTeeqJkeyO00Zvd27ms6emqRB9CUMbxpqEnU0keJWwbsIs21r41gfAXZFkdRGW9D3j%2FQgERTNYXjmxjxYaC7GhWfG9L9MbqLRFo1rQagVIGt17W4z%2B78u2oAp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6c88b1b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=8170\u0026min_rtt=585\u0026rtt_var=5414\u0026sent=58\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=10570\u0026recv_bytes=4401\u0026delivery_rate=298827\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=21290\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=555\u0026inflight_dur=123\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tIkuiJOLCxLTd%2FY39CXDMR%2BUDqD84oyH7A50jWhpZUpBlnJne64ErI60eLcs0r2gAEoq22EWPrwej8uaM79x%2BNkmFyduapR%2B%2BP4eVo60gSYf7KdzcLk7DReoGlGxlEzQrbYK5A8r\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6d18b4b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6003\u0026min_rtt=585\u0026rtt_var=5584\u0026sent=65\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=13838\u0026recv_bytes=5315\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=24480\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=638\u0026inflight_dur=168\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=epxt4cXGOu5S1KKpIdwaqREcQcwavIKX0Ox3SvAW4B2K2u1lU8jVijnr7bXn22wH8%2FzeudTQcBz%2BQD%2BgH1zBCi%2Bq39sCh6UBXB0u77BM590WPlZBSKrpgOL6tvt5BhXf2NUcZAGj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6d68b8b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5237\u0026min_rtt=585\u0026rtt_var=4590\u0026sent=69\u0026recv=68\u0026lost=0\u0026retrans=0\u0026sent_bytes=16001\u0026recv_bytes=5926\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=26591\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=687\u0026inflight_dur=212\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-12T23:35:25.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 12 Jul 2025 23:35:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdhJ9JThu4c0OOPSFiVR6FN6ERQirr86lGSrYah55%2Fu24fkZEsWxFfcjJ8SU9IwqFoUBmZlWb1awop4mhg2Z7r1ocRwPHv9S0UWc35oL8y8s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 95e45b628d8056a9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":4982,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"b181db3e36983dffb2d71d3bde3ea2d3","sha1":"cbf8dfb53f9828233c44b4a48af7740923c60282","sha256":"42b9e56557bba6c0b47b84defc799200e98599a7c1beca5c6e251b42c835a425","sha512":"b7015f427f77240cd9c62dbf9cb08ad8bb0f0b8169c45ee81d5a73c45dc1a1c0e49fe33bfdea45f57617a30bc0dd6d43191ad9b3965b91f7458c2c96881c2d2c","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GAzYlqZNeBu27RLlvaQxvbzM:fjFj7jOjEjK/VounOVk2qZyu271lCejI","tlshash":"17a18572f9bd007f20d3917261bda70a39a4c143db9b09903abcc2751f8af55aa132c5","first_seen":"2025-07-12T23:35:58.745021Z","last_seen":"2025-07-12T23:35:58.745021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-UvLVfL81f3auFMn6' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45b67eb52712b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26985,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (26985), with no line terminators","md5":"4885a20aef48d3a3891abedf111dfd75","sha1":"b6caa0ce9d0a0a36f11fc2cad02e00c35754b1be","sha256":"101a7962d6e95285d15cb4fa03c3033c7ce141eed104d74020aeb64021682737","sha512":"d8e08b07d7e7a4716dc3b78c399957230643702557548408bc5ec372f783b3f0a2b588ecdf7f39d5fdbb5c4b08da782cf8e20d3fe7fda3c055086dc4c4960cc8","ssdeep":"384:i36U+qdB83E29aJC6tHzSk1b2xdLVSmda3mDI9FB1tiyMfs2BPCLf:mdGrkHzlJUdLV9da3m8CyMzPCT","tlshash":"f6c2c8038a101b7e7453c72da3d1b5c9a338ba025f5ab1b7f25012a58f4d6af3b5370a","first_seen":"2025-07-12T23:35:58.748086Z","last_seen":"2025-07-12T23:35:58.748086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-12T23:35:26.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45b689bd6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCrikpx5CmDfiJ%2F5KLG2Tapu2PyFUe3sywaliLGGV3JcLMTCL2MBUImBV7lYjO26X%2FsBQbUkxz59lXMFJafCvKt6ga9GOCDrUXe53gOA5snM\"}]}\r\ncf-ray: 95e45b6a6ca056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W3E5ZwYwu9kkak7oTDpNWXIyYOCE87Jcobwu%2BRGcFdM13BYv1l41OMitMspYzM%2FmrTMJQHEAI2HDa89S5CbGRls4bNx92iIOIOUBFvaQ4z84VwopZW89s%2FYYAQsnsmfQFSjfKFTZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6cf8b3b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6764\u0026min_rtt=585\u0026rtt_var=5414\u0026sent=62\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=12732\u0026recv_bytes=5011\u0026delivery_rate=298827\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=23400\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=617\u0026inflight_dur=167\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tDPNE8y2AFr0DcRa85f7fo2l9CPaeBXDB7zdtTiGBSsV9C6jkafcfvmBgRu%2BUjvRideNAbro29c7CKGufl2BmBDL%2FcDdG2gTsrn6jt9jopYmbnNcRC2uOk9nNFwTO7JR2KhaBWL6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6d88b9b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5237\u0026min_rtt=585\u0026rtt_var=4590\u0026sent=71\u0026recv=69\u0026lost=0\u0026retrans=0\u0026sent_bytes=17081\u0026recv_bytes=6187\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=26591\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=704\u0026inflight_dur=212\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/95e45b67eb52712b/1752363327481/4uHFZP3LU2XR9c3","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-12T23:35:31.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/d/95e45b67eb52712b/1752363327481/4uHFZP3LU2XR9c3 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 292\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45b85fcd8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 40, 8-bit/color RGBA, non-interlaced","md5":"67a7bf9915900f68c97f9fbd74107799","sha1":"bce9da556d076f0601345c87b26e5b463f210375","sha256":"925caeab5bbaa4b5a69e46218e6612da9cd99938f6e602e20d7330fc5478a429","sha512":"10c481dcaa7a324bd576ce18f5e9faee4d912f9f21478c39aa445399562caa86c2166d5deeed6d346175cc4126f711c7cfe5a87ead2093ec390af39379731c6e","ssdeep":"","tlshash":"c9e01282b2909c10d72cee76a321a144755402e0f02e6dcc89fdd2990373df034ca7c0","first_seen":"2025-05-22T17:07:54.305589Z","last_seen":"2026-03-29T04:16:23.922523Z","times_seen":104,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/01a6b50f61fd/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 95e45b65d9c7569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":48828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":26,"dns":5,"connect":1,"send":0,"wait":9,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95e45b67eb52712b\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-12T23:35:26.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=95e45b67eb52712b\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45b68dbf9712b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":153981,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5d5fdbea85955d08d1864b9a8e41971f","sha1":"9280b37b6405d7832e2563dfa3ceee49915b0da5","sha256":"34e33c021bd512d77ab03154b4b063e7e52dfdb50b7304034e10cde4e839814c","sha512":"ebb58413a846662cd12593aafd7e7203df5c9f5bf99dd590ed1ad178f209e752e53b0c0d7299945bc00c3feeb3e0e91521f1f3c0dc1a9fd1803686c47925b767","ssdeep":"3072:g9gOgVD8mi6NTsgWynzU4Xey+NhPRn6kuJrsT:j3VD8mi6NTsgWynzU4Xey+NhPR6vw","tlshash":"88e3e78a39cdb551432270f9053729dbe2ea6cc870445e0cea20a5e47cd2b58797febd","first_seen":"2025-07-12T23:35:58.753168Z","last_seen":"2025-07-12T23:35:58.753168Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KT%2BCXcgn20mALInYJ4yz7cPqRjoIDKK%2BWw0GQrS3TUDpYaFHLsmteQ24zSTzzfp8FMsNG6uFAW7qR0DPa%2F%2B508yFl5YJGWu0fnF8Elu8WZdXe6xWwy6UKL%2B4U1KxZaCCniom9LiB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6d38b5b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6003\u0026min_rtt=585\u0026rtt_var=5584\u0026sent=67\u0026recv=65\u0026lost=0\u0026retrans=0\u0026sent_bytes=14919\u0026recv_bytes=5576\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=24480\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=659\u0026inflight_dur=168\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=537wB52E0LHhfU1Y7oUhBMLd6oNszi%2F6GwNwMfMtjZSA7ZQuI9NB2JH2OIbv2%2BMV3LhNcgX1seHYXRv0CsP33ho3bkfIocbbqKOHTknF0K4543eNtoMLYrBwb3b9KutUxWNjAdmc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6dc8bbb500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4522\u0026min_rtt=585\u0026rtt_var=3901\u0026sent=75\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=19237\u0026recv_bytes=6801\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=28693\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=747\u0026inflight_dur=235\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qSY%2Bt1Z6OojdnYoWMNbXAV24sREp9Omko24StYwKmlnqEKMPeEJEfavUmU2Ad%2BQTQeIuXnR%2FdE40yTIEFl17I%2FZL0lksO8nkrvdBfbcyhHyVfgpBYtM9%2Bq0Tf82VUsjLim2ESJKI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6df8bcb500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4235\u0026min_rtt=585\u0026rtt_var=3500\u0026sent=77\u0026recv=74\u0026lost=0\u0026retrans=0\u0026sent_bytes=20313\u0026recv_bytes=7069\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=28693\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=776\u0026inflight_dur=257\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.670Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://morocco-presale.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 12 Jul 2025 23:35:26 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCross-Origin-Resource-Policy: cross-origin\r\nLocation: https://morocco-presale.com/favicon.ico\r\nCache-Control: max-age=14400\r\nCf-Cache-Status: MISS\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFm0s%2BiOV1zARb0SL3xL7TwNvwj0QCQkeK8IyW8wRe1G8PrEwa8wVs9AWai06XvoMLfIgIu%2FctVaxAYzb0QoR6MWJynf7kWLyibGvQbf%2BZsm\"}]}\r\nCF-RAY: 95e45b67a88eb503-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dT1gTcjKHK8cYapMGgI1QIh2d1f%2FwewmcvwFTrKwq4voo9%2Fc38nNq%2FX5W5scbABay6rY0pVU5qChSOyArnuZoq4%2ByujDOVxxOmhReRXp9x3D\"}]}\r\ncf-ray: 95e45b6a0c4a56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ov1vAtQBFlXKxqRmwkPLskxJ%2F4zj9YSdn%2FAAt1Mkd68pBWKWE5PkKd7z9rYNxVWBzYVfZAE5xw%2Fi3tBs7oqVsv401M8gyPrazJIHoqAqLhYy\"}]}\r\ncf-ray: 95e45b69bc1d56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=W1nASoc30NpMUnKMEGUgbfm6x6EnpssG5FFaIWwJR2quQ1CDqLjEKM%2BOkXr3oJKG2oG03bCfLXkGZNV%2B8TchOoQa7Oo4wZ9tluADITNax5MQ4sKHzqHp7lMvDUT1Aqnp6Zvk4LLx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6bd8a7b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=8840\u0026min_rtt=585\u0026rtt_var=5081\u0026sent=54\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=8415\u0026recv_bytes=3791\u0026delivery_rate=298827\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=19187\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=442\u0026inflight_dur=64\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FYMLAEiUgH3VF7wlucVncC4CaO1RHPtmaOqbY17f1y%2FNDrhe1Qa0v0N14wZMLWN7hKrUVT7fYlPLEP2V0cE3gEuoSDnmjzyPTV%2BkYNXg8EDkuWjdgnWED0vYTAv8ssrDgNM9ePqR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6c58afb500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=9187\u0026min_rtt=585\u0026rtt_var=4506\u0026sent=56\u0026recv=56\u0026lost=0\u0026retrans=0\u0026sent_bytes=9492\u0026recv_bytes=4096\u0026delivery_rate=298827\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=20238\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=523\u0026inflight_dur=96\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/276054181:1752362299:BWF6OemIkF2oeN4G0I_wdvR4lJrBUDlap6CZNy7AWW8/95e45b67eb52712b/tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-12T23:35:27.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/276054181:1752362299:BWF6OemIkF2oeN4G0I_wdvR4lJrBUDlap6CZNy7AWW8/95e45b67eb52712b/tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3308\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$0aR96GzcoL6QBKz2lRtTVA==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45b6caea2712b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":284208,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"87e0c27ef8f5b21ac7cd1ec1314ee90a","sha1":"25fd8a37a3adcf866f526575589e2663742af9cd","sha256":"b09a3cdcb7b2e5a738e218eabb793ffe34607d561f4cfe5e303b6f9759d03692","sha512":"dc98c8fdbb658522f9e2745c0e613766fc0a2fc30f5cd66dff137642460c133a0a19ccd3da4641a7fd952d5dc20f7aae5026436f32ad3c7f8c64eaee0fe5e731","ssdeep":"6144:XZbm2Bz3s6HSV27h4f8BhKjtmNDhIR+lQ8x1p3y1eF:OLEh4f8jYiti8x1FF","tlshash":"395423692add0bdf8d6a852f0260e887ee916fc06057e1cc26fa7faf400dc425b7455e","first_seen":"2025-07-12T23:35:58.754919Z","last_seen":"2025-07-12T23:35:58.754919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":95,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8v7Tu%2FzyGzgRmk5%2BK1vpDhqp8mJVYJDFkAlqYaft39Pp11K%2FRBiv%2Fi3ep%2Frxrq3NPhFiadqPzC%2Falgkc3Ygytb9xOS4HeQKNSZHN0A3CbEskmX0%2B%2BdPYCh6casoC4HMHaoDip8CI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6cc8b2b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7286\u0026min_rtt=585\u0026rtt_var=5829\u0026sent=60\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=11647\u0026recv_bytes=4706\u0026delivery_rate=298827\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=22341\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=585\u0026inflight_dur=144\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-12T23:35:26.093Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sat, 12 Jul 2025 23:35:26 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCjosyRRfUzyTAXd%2BoHWBfw%2BbRAmU5%2Blw93gr0m9xXrWVn21W95a%2BHJ13Gie82eDmX9egVdZ9YhfSbu5fI7sWRh5gjVwJUmud7egvLqkaIkq\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 95e45b640d68b503-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":4983,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"6e1ab50f02b9fe1c274160716522bdd7","sha1":"ecdb7ef6ea302b367dba559153b924cd9cacadf9","sha256":"19148dc1190f1109f5dbae1adbe54c21ae36ee917e1c335c26a8df03d8459409","sha512":"7f5332373a00b1c21b34a1dcea1c4e42df61fee8b544d8f2d6e20150ccfabaca8bf2dd3372a2d8729fe5366d062b6292c282798b57a137848999e6e16c99a624","ssdeep":"96:fjFj7jOjEHDK/D5DMFGzLeiO/t8GSlqZNeBup7RLlvaQxvbzM:fjFj7jOjEjK/VounOVsqZyup71lCejzM","tlshash":"88a18572f9bd157f20d3917261bda70a3aa5c143cb9b08903abcc2751f8af45ae132c5","first_seen":"2025-07-12T23:35:58.756112Z","last_seen":"2025-07-12T23:35:58.756112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/276054181:1752362299:BWF6OemIkF2oeN4G0I_wdvR4lJrBUDlap6CZNy7AWW8/95e45b67eb52712b/tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-12T23:35:45.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/276054181:1752362299:BWF6OemIkF2oeN4G0I_wdvR4lJrBUDlap6CZNy7AWW8/95e45b67eb52712b/tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 43308\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-chl-out: geNeCPfSuDfamxXCPrrNROR2Xa6BC16J32AEaLqJRU7nYrPhPyDcuhjKZG27+1ko5Oo1mFRMp2WGjSNwSskaBXgsydGb5zb3CQ1RTwq4CNI=$lgrXls7zVM0CPfWWyOBpEw==\r\ncf-chl-out-s: MoFh7GWUHb9rcbhzHJ/1fa00+Qp7aPFhlecer4RgyDO+tc6sjDt/e2oKyBRVNl2lvadjsq/6wccXNMO5nnZvXmFjXPiEQwEn0OjzyC1PasWqvy5aMtGPyxEQxq/2+0aggNkbYJ6d3VZX4RsuFQ7xl03XUnQRGlChGPEplLQFxCpOXPJPcRE8FBMdqH8KNdHTeFKVDV4cxb82A8unehUQGlpsJ6WMa/yBXsIlk1x1bR5xh8se5B1ue1StUkTn0JTe4t1KyPezGroo+pitk18uwX4qJIGeOe0TK5YBdzKPBfZgFWSQ70TsuKpDNt3Bbub7AEMVM3XOi5y8saWmQj0/BPxWqEXRWAfXgyDZsOrOVRKF8j/a1zBOyB0xWODXzx9ue0KbiIOX/o6kXorrCG0b1dEcbPzfCXYcvpMfqqIXpwLklokFHHzBByRBCUUjoZVSGowljalLMaJ31ifUFgzJkkZFirX1cYPYYsh5CMm0zMZ/omalgv9jjmAhFPaNBlzNwDgAU2ncCCefXcLaWZ5xNyoPu1gM8w/TufVaz5RNW+TExkJP4IgXAuQn/bBuBOQbW2RcifH+IQa/IjaRiAFHyDV7FrxLr/LxNBP3IjJCCUjcEFHEUH5SHNCV1yNQafq6LkU4XVILM3WQxU+St1upVupob4ZopjXJbR+7NuEXw8KVtECHavavvqsU5gTVRTjsjA2NkSaVSOMVk34e9Kwv4vEwk84NmjIOJm4LXWw8KotGMrC4rpGmEt0d/P1JTruJFwQjTilcBYw+7pjB7VPNuY+jELo0TkEXNCqMGdmW8Ynkx65YxhjVD02iikZxjxWnxPV9lRLq9dBVv9ZOpi0qrbeL5rcmpJzEBneXA1wH4ZzfoDc79jLmwCHbDxOz4xtFBXQ7xPy2u6yID7G2CAfH3jPKKvzlbba33Q9R6VYCOKWT0+CLtwzmG02rL5IEvddBO8J64kY4KI3+iSkMwOkK5c5upLUiDWjE5FSVrhWqSNBwsCMlZPIxgoEY6vay9X8fNxjs+znRSPrbmWycMXOkoHHMaVxbzVOYYdzw3iRpuMNOKnGNvNgyDGX9cZ55fhFOIrmFgwev794nUBV0mymMAZwl19X4r8k6pZCTosgilM8mHkduTDD6PgCA4HReqTr3n/rYguFiDuQPlfd6G7XKv1YLUJxkUhnsGE5FJfOBjLiLlE5587KOeHcI+vJcMZmjfVZDpxauOaumpHKtIRrTew==$KxLYdsK1zqr5SPGzM1obYA==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45bdde954712b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4944,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4944), with no line terminators","md5":"c1ea9a2f36eb3de8736d034e7788b0b5","sha1":"fd5c9aa063fe78ad73cd717a38291b8fc639641e","sha256":"4abb356aa00025e616c372499fca26e82458e2222f7bd589cc56f6ad6e146db2","sha512":"2f990b969da40b42cef4bafe205f6d7ca5d513bf91fe5e2a0833acd6cd2c23053e4a948cdeacd48ed798b45c475dccde3c8d226cbeb9f05254cfb837356c4836","ssdeep":"96:i79CCeALcJhVf7ZHyz/Af6clugoaakYhJ+VOBMKBtGNb5JUQji0FSU:CsoLcJTwzYf1uDaa7YOBMKGNboYL","tlshash":"67a16b5b2a39b31a320d03a8601f884f8755149233bebdbd9dc075fc77a6a0b48ad455","first_seen":"2025-07-12T23:35:58.757243Z","last_seen":"2025-07-12T23:35:58.757243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"morocco-presale.com/cdn-cgi/styles/cf.errors.css","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.341Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/cf.errors.css HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://morocco-presale.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Jul 2025 23:35:26 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJPlJRYtMgFLhTiAVb%2BefpkaZnOMJfFCxiJbvVTEwvH4rLV5dddaqy7cBrNAhyQQJFxV0af2AXLUwBzlVZb8viLbKE7ok8eo%2FcRqpfnpgkYo\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nContent-Encoding: gzip\r\nServer: cloudflare\r\nCF-RAY: 95e45b659ed0b503-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24050)","md5":"5e8c69a459a691b5d1b9be442332c87d","sha1":"f24dd1ad7c9080575d92a9a9a2c42620725ef836","sha256":"84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091","sha512":"6db74b262d717916de0b0b600eead2cc6a10e52a9e26d701fae761fcbc931f35f251553669a92be3b524f380f32e62ac6ad572bea23c78965228ce9efb92ed42","ssdeep":"192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk","tlshash":"86b21323e5f5381a2516a13ca08a92dc69356073f7f30e9eb985d06cd78dd791f226c3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:58:08.563032Z","times_seen":560829,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xrfr3FcAS6uXzhwQu5B7%2FwdiHFIZdhED%2BEPgpsQB2iRCQKCmBV%2Fs9mJilsi6CeLF0E5K19T%2B3u1xeDE8HhzeyWINtsWbxIduHvpqpiZEjv1L\"}]}\r\ncf-ray: 95e45b68fba156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:26.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:26 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://morocco-presale.com/favicon.ico\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rw5%2F5J3n1cT%2BjqovSuccGYQpyFodTUMm59jUhqtnNjN1l6uLerA5LNLOJLi2QGUcGEIu2saFxXEt8MQy%2F%2FAtQv8gyccs3KJMDqHHWUm3Ec9s\"}]}\r\ncf-ray: 95e45b693bc656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jk3FL0O0fC6A2EJwC5huTmWuZQWOAlj8oTf%2BZil9YPh2prMaMxWPeUfdXeoqLBVSDT3r3cpeSW3aQ6YwvsAyXhuGh%2BOl6Ly9RwVGTNVyyi1wH%2BjrgO9yk0MNUty33Sq%2F83%2B7bs1k\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6b08a5b500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=7869\u0026min_rtt=585\u0026rtt_var=4187\u0026sent=52\u0026recv=52\u0026lost=0\u0026retrans=0\u0026sent_bytes=7299\u0026recv_bytes=3486\u0026delivery_rate=298827\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18097\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=321\u0026inflight_dur=28\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"morocco-presale.com/favicon.ico","fqdn":"morocco-presale.com","domain":"morocco-presale.com","tld":"com"},"ip":{"addr":"172.67.187.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"http://morocco-presale.com/","date":"2025-07-12T23:35:27.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"morocco-presale.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 05 Jul 2025 15:47:39 GMT","end":"Fri, 03 Oct 2025 16:45:19 GMT"},"fingerprint":{"sha1":"E8:27:71:62:00:D8:EB:BB:18:53:18:F1:C5:E0:35:4D:C7:AB:89:51","sha256":"D7:58:C8:8C:FD:FF:9F:1B:22:F7:28:1E:0E:57:C0:70:81:1E:34:9B:ED:C9:65:5E:56:FF:4C:F9:B4:D8:49:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: morocco-presale.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Sat, 12 Jul 2025 23:35:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gRKUnnu6YfXMIWjaHBf7n19b7xSB1oqOQtXBE5Hg1%2FGnkz4UJVpqFZeuDMGAxDg%2BAxNyPq%2FZ6O1V4OQUitRa06OtbRYOgrxUE1gTjaM66aEpLgyQ%2FtUWBYMdDWapgC4H3nazBEZL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: https://morocco-presale.com/favicon.ico\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 95e45b6da8bab500-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5018\u0026min_rtt=585\u0026rtt_var=3881\u0026sent=73\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=18155\u0026recv_bytes=6493\u0026delivery_rate=682761\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=28693\u0026unsent_bytes=0\u0026cid=1367989e1641f22f\u0026ts=728\u0026inflight_dur=233\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T03:57:33.344475Z","times_seen":17848604,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-12","alert":"Sinkholed","trigger":"morocco-presale.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/276054181:1752362299:BWF6OemIkF2oeN4G0I_wdvR4lJrBUDlap6CZNy7AWW8/95e45b67eb52712b/tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/","date":"2025-07-12T23:35:36.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Jun 2025 18:18:48 GMT","end":"Thu, 25 Sep 2025 19:18:44 GMT"},"fingerprint":{"sha1":"FC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71","sha256":"BB:03:73:81:C3:D5:2A:60:50:9B:EE:D1:B3:C9:4C:36:9B:BF:95:CD:0B:6D:F8:90:F3:87:0E:0D:F9:5F:4D:CA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/276054181:1752362299:BWF6OemIkF2oeN4G0I_wdvR4lJrBUDlap6CZNy7AWW8/95e45b67eb52712b/tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/dh5hp/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/\r\ncf-chl: tVd5cW.73HzV8YgE5hF6eMt8ur9rywLn2ylfqKgMps4-1752363326-1.2.1.1-g6k_lX.r4dt3LnTcBpEpsavFZTVUCI38WABnqhl3gD3z_018HnrlEmnqZfjtuq9A\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 34114\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 12 Jul 2025 23:35:36 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: sMPUHg3BX/KdvBOSaj4kku1HH95v4wJOkG3WqcnZwQjfXo/Z5WBdb6nSkTluFK0f$q01vrqTunJcSJjSyG/klgA==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 95e45ba42e63712b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29528,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29528), with no line terminators","md5":"d61f528442eebd535bf0e68ff308802d","sha1":"e21802139af4c07cb153dc25ee70714a40ff9262","sha256":"8a1dd773ddd6d75df7acbbb35f75ee83c191ec658cc6c9d0e29be93edaa2c2f4","sha512":"9c809e76ad8b83a14b0201482a27613334ad40eeb995ba1f9b196740a2b593ed0dd0ff4fb13f29230da62c09fa0053d692f88fdca9e3d7e0c2ff85f8a80265c9","ssdeep":"768:6B/ngF4pAeooo3Czr+7PZedbejFd1+sN2gHrb3JG:8Apoo/PZAejigLNG","tlshash":"b4d2e1e4fc645a6e0a7141fa28870f3a2d714fe644f606c9a25c4acb33fc8455db6c67","first_seen":"2025-07-12T23:35:58.758967Z","last_seen":"2025-07-12T23:35:58.758967Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
