{"report_id":"d839446e-062e-472d-9026-4703c81da081","version":6,"status":"done","tags":[],"date":"2025-08-05T21:04:00Z","url":{"schema":"http","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"title":"CYBRO - an AI-Powered multichain earn marketplace"},"submit":{"url":{"schema":"http","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-09T21:04:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":5,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":43448,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-05T21:03:38.622600+0000\",\"flow_id\":1395542008160441,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":43448,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-08-05T21:03:38.614585+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":50518,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-05T21:03:38.650623+0000\",\"flow_id\":945873964675576,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50518,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-05T21:03:38.635384+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":34676,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-08-05T21:03:38.656210+0000\",\"flow_id\":1992340598862813,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":34676,\"dest_ip\":\"172.66.150.162\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-05T21:03:38.635869+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":57194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-05T21:03:38.724648+0000\",\"flow_id\":372077071348515,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57194,\"dest_ip\":\"52.50.34.177\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-08-05T21:03:38.635683+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":57202,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-05T21:03:38.790649+0000\",\"flow_id\":169451251745810,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57202,\"dest_ip\":\"52.50.34.177\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-08-05T21:03:38.705554+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cyboo-io.live","ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-27","domain_rank":0,"first_seen":"2025-08-05T21:04:02.454124Z","last_seen":"2025-08-05T21:04:02.454124Z","alert_count":44,"request_count":44,"received_data":7436973,"sent_data":20268,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2025-08-05T15:20:00.236303Z","alert_count":0,"request_count":2,"received_data":7511,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-07-30T23:15:51.450001Z","alert_count":0,"request_count":2,"received_data":939,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-30T15:19:50.250092Z","alert_count":0,"request_count":2,"received_data":798860,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":0,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2025-08-02T22:56:41.538486Z","alert_count":0,"request_count":2,"received_data":5971,"sent_data":1021,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":43448,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-05T21:03:38.622600+0000\",\"flow_id\":1395542008160441,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":43448,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-08-05T21:03:38.614585+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":50518,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-05T21:03:38.650623+0000\",\"flow_id\":945873964675576,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50518,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-05T21:03:38.635384+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":34676,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)","source":"{\"timestamp\":\"2025-08-05T21:03:38.656210+0000\",\"flow_id\":1992340598862813,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":34676,\"dest_ip\":\"172.66.150.162\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058806,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-rpc.publicnode.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-05T21:03:38.635869+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":57194,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-05T21:03:38.724648+0000\",\"flow_id\":372077071348515,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57194,\"dest_ip\":\"52.50.34.177\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2025-08-05T21:03:38.635683+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-05T21:03:38Z","timestamp":1754427818,"ip_dst":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":57202,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-05T21:03:38.790649+0000\",\"flow_id\":169451251745810,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":57202,\"dest_ip\":\"52.50.34.177\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-08-05T21:03:38.705554+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T20:47:57.562342Z","times_seen":743002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"64cbf8e7a556a18a48e53d9812dacaee","sha1":"0592aceb53f9f89c415200346c89b7f34b646f4f","sha256":"e24e5ffa482680b2ac23dbccb58081dc0127e50c94acc0ff2f7fd4fe102b8284","sha512":"56970ebe7937d39f77bcda3253318bbb49906b06469c05d1afbf2ac4655717937596605059f9eea3dc984dcf308ee7a9c05c5e3314990f079e2553555824b76c","ssdeep":"","tlshash":"35e02b286aa755fd36b73591c71fb240e86500735085d801fd1cf58a0fc0e1434b9fc9","size":341,"data":"","first_seen":"2025-04-18T14:08:11.340368Z","last_seen":"2026-05-05T08:12:47.09703Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01cd239d06b2581637d9921042d1ca43","sha1":"5707cfa5edc61b9ae70db235b19c77427a10e3f3","sha256":"09a1d09bb9200f1d111e5ce3d2205e9c900aa1c88aeeb2a328323031633592c8","sha512":"891208759849c732dc9f13b98cb17c07b0de598ac42ae3c57c395d012ad6162e6c164b4edb2810ef5597fe40fdbdbfa1a6c1e73fdfc9e8027d5470c5c9ae0d5e","ssdeep":"","tlshash":"1fe02ea82ee61338237b2120831fd28037e48043a0e4f8023a1ce1cb0fd2e1000bf5db","size":294,"data":"","first_seen":"2025-04-18T14:08:11.341693Z","last_seen":"2026-05-05T08:12:47.099922Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/5ac37b41-54a5438f841d.js","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6ac15b41f996080de31230ff9f0e2d5","sha1":"fb17726ed6c06faaa875247141eba8b19d4ce513","sha256":"892aa7e9c0e28fc8c806e41c4801441c8b94c43abf06432a87b5aae02829fdc3","sha512":"82a659825109fc23f33b9b5b68d7d6fd7dc679c4640d4e0cc03095e3bf8e6de516bb7110e58d7f2854b7e1cea0db5aadf41c6f01809218c617d2029bc6151fec","ssdeep":"24576:qsd2QNT1/FK/n1hKaSoWrjdjsDxG6Ij3/WKtv6ev5+jZ3mm2qwHvF5cwTd3SJUI4:qsd2QJ5Gcaedjs+wAN5IHY","tlshash":"d236d808fb014fe746b1c398417690afed16274a6a0d66a9797cecf9f378b1227c7016","size":5106404,"data":"","first_seen":"2025-08-05T21:04:09.312263Z","last_seen":"2025-08-05T21:04:09.312263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T20:29:14.3167Z","times_seen":237663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccff2a8eab1bd5a092a4a70cac2fa3ce","sha1":"55236db8de9a44e733170ed454b770369d469d50","sha256":"33a5f253446e9bed430e3438e284a3cfd815d8bb914c3b8d9bc0cdcfe391299c","sha512":"cb910d9a38040f9742fa2d8654232f1a7669ce200bd1dce706e085fb1269b9d2a9a8db7f13f474deca4a87731dfce5dafc295bdce5d77835b0ee37fa220d5714","ssdeep":"","tlshash":"b1e0863935761574097b987fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":377,"data":"","first_seen":"2025-06-03T09:01:15.310945Z","last_seen":"2026-05-05T08:12:47.102423Z","times_seen":560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"495a10242d90ae6c8e08a5e5ae7f19f3","sha1":"7866a91e8736398df8f8f14bfb5c8ef06804bb75","sha256":"b3b24d4259d50bdacba65e8f05d8a4ac7e1919575c212c0e01aedc5e7170401a","sha512":"6289d83ed0ca8c08ead7f7b46c43120891bb3c3f940eac23c6b4e89228152e13db5e07c9d8bb4f17590c1d38a08206f56de680d2b31be2c3d2d431961ace766c","ssdeep":"","tlshash":"2a119ec078b4d042122e26fac12b74057c92dcbf83ac6090d56ddefc19b119c26d69ba","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.004438Z","last_seen":"2026-06-01T09:40:57.107347Z","times_seen":1069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cyboo-io.live/corner.1383a370.svg","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /corner.1383a370.svg HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/fa342df5659cb0c6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EPlauMW5RBKlylCXbyl%2BY9gDUko00G1ArqLMTxJEP8akMrpYVPDJFcxQmbV2s83WYfPBpmMZSJZ%2BlaxpMSQZhRxdrgQGsA6zg39EWvBwuzRKwN%2F7PHEDOQA7moPrAcuM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: W/\"e3-63aec9a411b8f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96a93e0998227127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2455\u0026min_rtt=0\u0026rtt_var=2116\u0026sent=811\u0026recv=458\u0026lost=2\u0026retrans=2\u0026sent_bytes=753501\u0026recv_bytes=31098\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2345\u0026inflight_dur=280\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0e512e47fecc095dfae18fe9f16b2bd","sha1":"9567c86292411c1e301e04def668dd25f15e9691","sha256":"f3e851fc403aa9678b2c5eb720b40468d1e5a56ce16adc090a098f6d79f73a71","sha512":"2112aaaa0aa8945455543f5c4aaf070911c99fa5a5af73a8d3338a78d50693e97264bd965206f33571d98eb9f64ce18b9131f1b4273969200d82d6f82848cf2b","ssdeep":"","tlshash":"c1d0a7e58f5c8dd5850587f4f92498be4c0260e351c42294c5202833f8108d52d139f5","first_seen":"2025-08-05T21:04:09.10845Z","last_seen":"2025-08-05T21:04:09.10845Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/be66866ff3e069c8eac351701d7f4835321a4791.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /be66866ff3e069c8eac351701d7f4835321a4791.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 135920\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"212f0-63aec9a40f097\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrSc8FcDIuO0juwKcNmZAwoVUvSWftEY6eCHB6H2RrKWupT8G%2BYWApPt5cxtRChZCsdzIE4FCLkdL%2B57ZaDgLDRn3khlCAWPlKkl\"}]}\r\ncf-ray: 96a93dfdac0a56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4096 x 591, 8-bit/color RGBA, non-interlaced","md5":"4c07fce8706291fa4807011038e333b4","sha1":"be66866ff3e069c8eac351701d7f4835321a4791","sha256":"defad9370bd90de2768f90309298fd3bcfec99d3d2bb50b3bbba00249aa19866","sha512":"d3933c090c914ead8e78c230fecd5f70903bd472c48e614bdceb398542e5aab90af2a4e4fdf827ee13991d305f6732d2395ff13cb9a6aaa3397ecc4e125b7cc4","ssdeep":"3072:gLDKOqLfV5x8tk2Mu/pTQFHzPHxChI1APX/0T7Nin:gifV5x8//ebCx/0TxY","tlshash":"3fd3e002d38ba073f619045ab550246b89806cbb7209cd4693ebfa1f735bfb91f72e45","first_seen":"2025-08-05T21:04:09.115999Z","last_seen":"2025-08-05T21:04:09.115999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:39.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Jun 2025 08:56:01 GMT","end":"Wed, 17 Sep 2025 09:55:57 GMT"},"fingerprint":{"sha1":"4E:C6:C8:AF:D7:68:98:F6:BC:1F:7A:02:FF:9D:87:43:53:C8:4A:EB","sha256":"10:15:05:73:55:F6:0B:BC:0F:B7:5C:69:4D:A8:BA:75:FA:56:A6:4A:89:07:1B:C5:F5:81:A9:2E:48:17:B7:E0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyboo-io.live/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cyboo-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:39 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 96a93e0cab827127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6375,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e03d109fb7cf9d96c48895d65145bb3c","sha1":"fa507f515b54fa95c02ebe52ea3ff192dd6c909b","sha256":"95781d97071276af538b664f0196d44a10aab2c6ca81883cd19209817b2e78f3","sha512":"12675a48555f65f4653fb1fef0a5bd53c8d45a7c9cbf71ee5f0fc4f510542b1fbc96b5d2266d08eeace10fd5ce36988726991fd0657a15273f6c84303163faa3","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60j3:YKam3QytxvU15+doY1jNNTt9j3","tlshash":"16d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-01-25T17:56:03.222171Z","last_seen":"2026-08-09T15:35:30.729529Z","times_seen":1271,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/77689c17110a57a5c0a243f87e3ceabc0e1f4342.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /77689c17110a57a5c0a243f87e3ceabc0e1f4342.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 148399\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"243af-63aec9a40a65f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F60fbsZI9F9rWROPlHWNif%2FBE1rbMrtYBoduE775qU2mQGmyoarPj4uLLgr8%2FIBuVop%2BxH9yv1iRnDQAlkeW0xBX%2FkQ7FY2Wfw9u\"}]}\r\ncf-ray: 96a93dfdabf656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"926b79b7d999260545ce68ad1d8096d0","sha1":"77689c17110a57a5c0a243f87e3ceabc0e1f4342","sha256":"680180bbb4a7ec7456282c0c4194229cef01b94026792b84534acbd4992f79da","sha512":"7c90f8670917e3d43de741cd38238721f1510ec926832afc12b3fc46d27c6c1a81373f82bb42cf7061bfeba3de321345c150bc94f73b85a58f14cfeeb5320c45","ssdeep":"3072:1Svf065RloM9+oPhaYuyqw8SxsL3NkfQp53ePngt7s:kvfr5R2cTcdkxsL3NP53ePgt7s","tlshash":"9be38b85d3c24273fb181168b9a604630889ad733115dd1a65cbf82f770bfb41dbadab","first_seen":"2025-08-05T21:04:09.136461Z","last_seen":"2025-08-05T21:04:09.136461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/176b159565394c49-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /176b159565394c49-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51008\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Hpjr%2FAESlgzugGl19XlLH%2FnYYLDDBPOHm3uJ0%2BVjOZf4IqwctrtEY6t1qcGScrNCMterQzwCXcVTvmWrI8jMENZZPT%2Br62shScG9UFmsHFa%2BFEhyWZBAh%2FycQbN%2FtPqy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"c740-63aec9a3f5a57\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96a93e05bfd67127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=932\u0026min_rtt=0\u0026rtt_var=844\u0026sent=266\u0026recv=364\u0026lost=0\u0026retrans=0\u0026sent_bytes=52931\u0026recv_bytes=22001\u0026delivery_rate=2528640\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=17517\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1706\u0026inflight_dur=36\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51008,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51008, version 1.0","md5":"de9692f86990a2d7745fc63789877605","sha1":"c96e641c4c9962d8a7fddedfa6c167e6b391c71a","sha256":"0392b42f14368f80ec6d6b8359b605d9a2e3e4b50fe3d733466d67e2a289dc19","sha512":"8e47da97bb236ab08a5c06eaa5969490b81df7885893751afb8a2688fbbe0e8361405118259fca7292125febbb5e05b89df2d4332968a9936d50cd36717098bc","ssdeep":"768:/t2qFhz0QhclMI5nPghPqfch7L2nuDQ6njZl884v1LjwdAMO5c5KRuU/J8CgArk8:/dF0Q4MI1P+PXeT6njivh86HmwJd/","tlshash":"ec3301f3246745bba4ad69fe03a4fdb631032568805439a84421d542bdff1ae33617eb","first_seen":"2025-04-26T05:32:18.082175Z","last_seen":"2026-08-02T01:54:16.972784Z","times_seen":209,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyboo-io.live/\r\nOrigin: https://cyboo-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 96a93e0abe8656b5-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3011\u0026min_rtt=528\u0026rtt_var=4940\u0026sent=7\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3194\u0026recv_bytes=1145\u0026delivery_rate=6369501\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=179bf2c16516ba74\u0026ts=176\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":132,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/eafabf029ad39a43-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /eafabf029ad39a43-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7900\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Ffrk86ZVdJWeLIrnwNU8wqJJyVc96KszmKjgDVFe0Hpyfy0OP6E75rrRRPTSD5tT57Xj9Mxws3ehzw4fU53Ka7l56tNIHZzw5Z5p5da8nkSjTxtn%2FcD4s4zNYzb0lhmw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1edc-63aec9a41429f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e05bfd37127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1809\u0026min_rtt=603\u0026rtt_var=1523\u0026sent=246\u0026recv=357\u0026lost=0\u0026retrans=0\u0026sent_bytes=27196\u0026recv_bytes=21688\u0026delivery_rate=914321\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1689\u0026inflight_dur=23\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7900, version 1.0","md5":"43751174b6b810eb169101a20d8c26f8","sha1":"7e48d54b1df1d3f657fc90227590308183ff9ddc","sha256":"3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0","sha512":"a56307976583f9f0dd41ea34a3878c1fd69d5f89577664c350be014f6485da077cecf03f315104dc00e3cb0b6036d9b58e602ca19e963bf500016f090ca80ff2","ssdeep":"192:J2+QXwv9y8UEem7iQD+hqsNl3ahSFsd8Rq0s+Hxf49:J2+9vI8XX+DxrFe0/f0","tlshash":"dcf1bffef23115d580b66bb6c307bf24d9298147fc772608a61c6978a4e9f0c194cf0a","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-13T20:34:55.128089Z","times_seen":25228,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/pessimistic.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /pessimistic.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4703\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1Kf86mr9fqhYtkPzM%2B2XftWqKr%2FiHp4vPOzRlCvT6UBJNjKyG26je4xOYgo%2FTZASo%2FyL%2BsmH%2BiCgDCxVyBgbTzC7UfAbE8UfOZHbSGwpxE6rR07TFe%2FI2%2FWG3mIe%2Bd%2BL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"125f-63aec9a479b9f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06fff27127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1914\u0026min_rtt=0\u0026rtt_var=1916\u0026sent=486\u0026recv=402\u0026lost=0\u0026retrans=0\u0026sent_bytes=333744\u0026recv_bytes=25438\u0026delivery_rate=10896471\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=33085\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1875\u0026inflight_dur=136\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 292 x 122, 8-bit colormap, non-interlaced","md5":"0d85bdd8a97869dd15a91c5cdfb63fe7","sha1":"6e2c219f0b09f3a3bd009c306915a95aa40a250c","sha256":"5065ef25c31e3cf553f2a375fa05ec724132a67cf90c83395f22deca49cb5314","sha512":"a33696427c413c4cb28d5ad85af055395c54c980440c8c62712b1d88e8052dfe15b3e97c4c290b3bbb1e3dc0b4519deb4bee47e89c1448984262c8cbe65d11d6","ssdeep":"96:siM0ckmYvbI9H8sSpE0rxA23UHKn3/pmaePdv9UgRCxr:siMP9D9oC0AU0VRs","tlshash":"eba15cd97cb17474a19948a60b94bcff8e95b64a1036c80dd8bb98b43d31a2cde41a4e","first_seen":"2025-08-05T21:04:09.165919Z","last_seen":"2025-08-05T21:04:09.165919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/3HsXPhKVp8Y7tScVKgVyB4.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /3HsXPhKVp8Y7tScVKgVyB4.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 915\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q%2FP23kpvR1eYuUFxlMLhbg3lJ0l89Ms8UlpVLXoUc3PzMFUyM9mYaSd0N8Yho%2Bwmxb0aAeli1rm9X4cc%2F90PXGHJw6U0LvgiMXwka8xH5g%2BBadkcW%2FeZblhHYm0ZgFc2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"393-63aec9a3f6ddf\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e09f8337127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4647\u0026min_rtt=0\u0026rtt_var=5970\u0026sent=812\u0026recv=459\u0026lost=2\u0026retrans=2\u0026sent_bytes=754821\u0026recv_bytes=31146\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2353\u0026inflight_dur=288\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit colormap, non-interlaced","md5":"be8da76ada1ffb4e615994210822a77c","sha1":"5cc57dd395a7acce8f121c4b4002ad7bc2b9d06b","sha256":"b97453f8cfb2259efc5a3b7aacb3b7eeeac35a8d7d9765fd0c7900875785b5cb","sha512":"065ccae7a1f069deb8354162cc01dd54c765eb80fddc7fb3299fa003f3e4ab57edc8d700292fb52bfd3667152d81b375dbe06deda240fb86059586b9084647af","ssdeep":"","tlshash":"fa11b7fda15755f295bc32921d611d32e80381bbadb3a1b8708d7d29028c87444973c3","first_seen":"2025-08-05T21:04:09.1693Z","last_seen":"2025-08-05T21:04:09.1693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/d8c59b140444835a.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /d8c59b140444835a.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 1470\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"4ca2-63aec9a413acf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30mfV9EXGpk5JFu48aS9%2FMDl3h6juh7Y0mw6G%2FpUTzl84vRYihrat7tVqMhetdGpb0bVjioI0qc6VNSUz6IrOMvyNOmGMvyUx6Am\"}]}\r\ncf-ray: 96a93dfd9be656b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19618,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ee7e817fa6af566f5bcb0d0c2bc2e561","sha1":"804524380190d44d9b4a10da7ae31fd1161cf76e","sha256":"c1b68f085e233c1d4f3a39673a357dc9fc24a02781c62da27aaf4e7e50ec517e","sha512":"590313a234b106095ef27dbad00b8246a84f0ca5dbb687a213aad669bcfc6cf9d13d2cfbe2d79d385c5bafd81c80b127c6a2d14e6ff9c31e6d22eef7bd041322","ssdeep":"192:KxUqYcxUcYlxUuYvxUyYpxUeYc8aucYxqsfTYxN8e+YATIVGxUBlYPxUeUYVxUAQ:E4Wyf45Qzwck3kDhSAwbZRPRQLhv","tlshash":"79925720801a505efa36bc9e73c73f26dd2d101b93c0d629bfa536541fb7934a265bac","first_seen":"2025-08-05T21:04:09.174057Z","last_seen":"2025-08-05T21:04:09.174057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/a80921fa4ddc0767.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /a80921fa4ddc0767.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 38066\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"4a9a1-63aec9a40cd6f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ra2ToY0%2FKC5wZq89Q5mCUk%2BW5NepB4l59Nfs7R8JNeUr22f9%2B%2FnFi27GVPwreRFxgQ5NXbg7Bgln5ft%2BTAjQxESdtdQIFGAvm1Wz\"}]}\r\ncf-ray: 96a93dfd9bdf56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305569,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63243)","md5":"79d69b4bac0fd8cf138ec81fd7d4ee25","sha1":"d125847e45e83eda18e454ce979ee15677ed4cd1","sha256":"55293bde6a78a30a5d9d4becccd3cb3759d526c09097b1dafcf780050ffb0858","sha512":"141bb8104308654d7d768acd809cd1f386a70ee78a5cc05a3a0d5959c7eca4bd975fb95add90fd497a825517f28e89738e4ac266b9dfd7365257b851d66bc21f","ssdeep":"6144:GHFkbilDL+pZkxiO4hvAOg2QhQsyvw3uYNqbPpAQpRnV8Um/lkfIzyZi3l8cX8NI:qNd","tlshash":"dc540e5aba4680bb3e1b54f9f38cedddc106b0c0df7a19ebe985912153c17f329a1258","first_seen":"2025-08-05T21:04:09.178976Z","last_seen":"2025-08-05T21:04:09.178976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/5ac37b41-54a5438f841d.js","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /5ac37b41-54a5438f841d.js HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"4deae4-63aec9a4096bf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sAbjg7qcWZXY%2FXgYhBcyadyuTcJ4NyVG%2FCHPxyzpPfwOcmOLR2%2FOc9bK6fNe8jMBWajTaZt3MAUI7kshITvNYlBpZiIsSKIVDYrM\"}]}\r\ncf-ray: 96a93dfd9bec56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5106404,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"1c4d034318dc7efc5ea957c17d40a9df","sha1":"316744e050303651d12fa987112b989456173c7c","sha256":"a12abf350a7525d292c32daefa3e4a7dada39e4863280321d1141db29dc03efb","sha512":"03f9d0a73c6e9fe91eeb6bfaa72b09223aaf991e3c7c62be294a110ec9c89dee7f5c40dc9283425fe021bb4b5d89f3aa55cf8d1615b05ebe24cfd31a7037038b","ssdeep":"12288:VzBe6kEdOxQoiHz1VR/087G/nv1I2nFhWNVTIf9tMD:qsd2QNT1/FK/n1hKa+","tlshash":"70259e08ba60743386b6c0980677888ab13eb75e7405278cb79cc5f9bd7c6887477f69","first_seen":"2025-08-05T21:04:09.182031Z","last_seen":"2025-08-05T21:04:09.182031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/token-hub-title-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /token-hub-title-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 4308\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"10d4-63aec9a4d2d67\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkoJ%2FntNQx5goHJ2k7YMWV%2B4yx6RnTRbbK45VkM2MKhH66hmUzlw0fMD8at5N0UITDwvkn938entBypuOKXyT6wFb5%2F7HTgms3En\"}]}\r\ncf-ray: 96a93dfd9bf456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4308,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 94 x 101, 8-bit colormap, non-interlaced","md5":"151d66bfc77ddcf5537ca81c6798a3b9","sha1":"003d634206f35073ebffd11245c86c23d531499a","sha256":"9565e02e493f8b75e57a6f4ad833a338369173858ceac7dcf5fc7c46a0e25709","sha512":"784d8a62e382fae5fe27911ab2a8c361975e31d7cac3ff37772ec35adbb990db57692aad2ecfc3bff576cf893528b74c1769750be6aa5e174f3aaa01d34804ff","ssdeep":"96:/iXYwk/aYFSqrNqli68QCSYDKJsCUZXSG6AQaZEEKQ0fK0EHfPHUYL6:qowkyYFSsd68Q2DrZtzQh7AXUU6","tlshash":"fe917ce34d4618b946069b864e49d660edcaeb5eaf22208e4f5f21681a71f811022fb6","first_seen":"2025-08-05T21:04:09.185288Z","last_seen":"2025-08-05T21:04:09.185288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/176b159565394c49-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /176b159565394c49-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51008\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YgPY%2Bh33VeOjQ0atlNxgAMH%2FyngFXDUCiNtchrlK3P%2FtPv1NzZyorkUy0afSTnxGVf1ZCXVRVlD9j%2FGmXkEYay5uXSZ9S97Zt29kBSDnFzpCtgX0lGuVUUgo2wWsSIej\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"c740-63aec9a3f5a57\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96a93e05bfd47127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=932\u0026min_rtt=0\u0026rtt_var=844\u0026sent=266\u0026recv=365\u0026lost=0\u0026retrans=0\u0026sent_bytes=52931\u0026recv_bytes=22285\u0026delivery_rate=2528640\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=17517\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1706\u0026inflight_dur=36\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51008,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51008, version 1.0","md5":"de9692f86990a2d7745fc63789877605","sha1":"c96e641c4c9962d8a7fddedfa6c167e6b391c71a","sha256":"0392b42f14368f80ec6d6b8359b605d9a2e3e4b50fe3d733466d67e2a289dc19","sha512":"8e47da97bb236ab08a5c06eaa5969490b81df7885893751afb8a2688fbbe0e8361405118259fca7292125febbb5e05b89df2d4332968a9936d50cd36717098bc","ssdeep":"768:/t2qFhz0QhclMI5nPghPqfch7L2nuDQ6njZl884v1LjwdAMO5c5KRuU/J8CgArk8:/dF0Q4MI1P+PXeT6njivh86HmwJd/","tlshash":"ec3301f3246745bba4ad69fe03a4fdb631032568805439a84421d542bdff1ae33617eb","first_seen":"2025-04-26T05:32:18.082175Z","last_seen":"2026-08-02T01:54:16.972784Z","times_seen":209,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/secureproxy.php?e=ping_proxy","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyboo-io.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-length: 7732\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w0Hz4v3JSeclxT1A8P%2FtUdnh0gn2E5Mr0KOeQ2d%2B5NgDW86yy9hVNxOt%2F7fBNsDNQ1OvphRySjfxJ2bTd3RMKGp1yLJR0iXj5wm%2Fa1EECckV7qZp7DU9h1qQQxA9Syrr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"1e34-63aec9a4b0a87\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96a93e0a58387127-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4647\u0026min_rtt=0\u0026rtt_var=5970\u0026sent=812\u0026recv=459\u0026lost=2\u0026retrans=2\u0026sent_bytes=754821\u0026recv_bytes=31146\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2350\u0026inflight_dur=288\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7732,"size_decoded":0,"mime_type":"text/html","magic":"PHP script, ASCII text","md5":"266ba4231e44862da9e32e4f9b6a8012","sha1":"eb2b688e2b06e66a65aa7446809b35e10aba6d7b","sha256":"a568132ebe184290adad1a5970f34e9191d3f38894c640ba6d4d0acd9237cc4d","sha512":"59fd83eb968a9342a72a2214e6c9718e02f558f7abf9cb4938b8b7eb01e5645e140b4b92a656ba78cd9a31d244fb0fcde96a4e313739cd9496ca3d81b777fb65","ssdeep":"192:q6vgpPDNF6iTypG/+WA4yAXg9bDI6C4VCRnw0Zy5q:epLeit2WBwRhVmX","tlshash":"b8f1611079e37a80a177e0bda74fb8086609a80b441ed909be5c23931fc033cebf169d","first_seen":"2025-07-12T22:38:09.124273Z","last_seen":"2026-04-09T02:34:42.258638Z","times_seen":964,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-05T21:03:36.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xq1pL%2FAYZwbNyyiIVKvp7yVRdk0Bea%2BPC9S8xOc%2FXUMJSx63ZHrnWgNV2rcUN%2FPPLvi3CnVnHn1AOAo3JAvoj1kJE7pDOMf0NAvu\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96a93dfb685f56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157566,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1100)","md5":"20ee6f4734681151259d0d054a403991","sha1":"6b5b3125e9b9e69bf1b8173b329e77c3b4ec6304","sha256":"c3394f1fa463b62c08f7ae4a3f4de61b19210fe7887b24dc72a6eb8239678aaa","sha512":"1bc4fb24e26369d5e221de83b06e55922882108f75c20e3ca7151d4ac53b61c383c53c52c9e0b4cd70e6ed81bbfc36fe39dd69d8994c72f3e876352cb3202e96","ssdeep":"1536:/snlOBuphwKoTKPAqolnmp2NIcJhFjMC4mmnANekZ8ai+:1B5LlnmrOZ8ai+","tlshash":"4bf3a79075f1463a611b47fa37faba4e5e54f043c986e68cb6ec03a1df52db39893048","first_seen":"2025-08-05T21:04:09.191973Z","last_seen":"2025-08-05T21:04:09.191973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":34,"dns":9,"connect":1,"send":0,"wait":90,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/fa342df5659cb0c6.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /fa342df5659cb0c6.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 8012\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"9efe-63aec9a414e57-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwrL0%2BG%2FZ9NfGhRmDkz4p7%2FCgOkqEnO%2FHlw%2FBBo87gwzcvwLB7Y6dCEDKamLcjFi0FVRLbls%2FKBy7O%2F%2BYuKjF2I%2FLU%2B0y%2FnlEp0F\"}]}\r\ncf-ray: 96a93dfd8bd756b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40702), with no line terminators","md5":"d42602d5302d074e94aac0168582573d","sha1":"22676e7954858fd30cf8957e63aaa44822d2dd1f","sha256":"5d3cddd5da6205154e19c40fbf522e5ca220da68739d4721e68187a983c2bdf6","sha512":"fedde45bcfd22c85a08754ad7500302430a1797452ee18df252d5bcc204cb1d7ebef98be19ad026f912eddcbd9d8649febba5c2e518d22ff98c139e20fa6cf22","ssdeep":"768:+dRsdO9T1oP6PO1kQTooJFYX4R//s0PkW4hhHOTJ:2YO9TqPcDoQX455sW4PHOTJ","tlshash":"4903c951ad146535bc3bac5262dcaf5dd415c18348ef4abcfdce2a2c89c37d62ba2309","first_seen":"2025-08-05T21:04:09.199031Z","last_seen":"2025-08-05T21:04:09.199031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/8f5b5ffb558286dc.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /8f5b5ffb558286dc.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 1321\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"110f-63aec9a40b9e7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSiMYKRXbHX0gITSPkn%2Bi5m3ZWaAu829QmBeLQLDc5vv6QylMBwbxUIpx7nWzgORBLIQfVhiXCY7FK3q9ujCXzfioowTFHe6jRLP\"}]}\r\ncf-ray: 96a93dfd8bda56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4367), with no line terminators","md5":"9024523383d48762f827c3d2544ba692","sha1":"8f2bd090a4cbddfd4ca9245be7ee12dea38be974","sha256":"07110559a8362b24211b5f40a53e175dd67f0ae539f2c1295b81ceb6ce22961c","sha512":"84be144a4377f572cfd7fe329010dd58bf693fefeb2ec88f59185a17652a7199c7705811a7bd47c8cea68204fc3147a14ce7bfad9fd3cc8405e2cd6962c10d57","ssdeep":"48:KJ19MeYNImRiWcZRUuS5LSRY8KZOHwdA7nM9o5FevRG6:KH9rIigJnK7n6D","tlshash":"5491dc22a662f21cfd3bacd576c1374ea91084c7b53e59b4e4403a31cbc71632b5638c","first_seen":"2025-08-05T21:04:09.203192Z","last_seen":"2025-08-05T21:04:09.203192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/03d6c4c3b4871a949d512d7aa342138033c14e37.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /03d6c4c3b4871a949d512d7aa342138033c14e37.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 22239\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"56df-63aec9a3f4e9f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPsBtmbH4u3kprXahAwGna5mKakUjpZVMosKSvZa6gVlzWfoNZPne3EY5anL3ZSS39aBIcVOOKVT38aqbnzDsqI0DjcwxclRnFmt\"}]}\r\ncf-ray: 96a93dfdac0056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 352 x 400, 8-bit/color RGBA, non-interlaced","md5":"34d53de2f32bce2ab9a0f708f12ea562","sha1":"03d6c4c3b4871a949d512d7aa342138033c14e37","sha256":"15981dcf288b7fdcac24c4b2680774a40f189d942d9497b37bd5540c2c47b991","sha512":"bd8fe601ee175c14b3185cc9aab5d99238666df531b64dfd8249e0501ca1cf562cd3dfcd6d97f93c823e21f3f25ea68c46eb1099464604c887edd1cc55b27ab9","ssdeep":"384:NiSxM2zbAV3VgmBiowJpUXu5n904xCrBoq4kZSx3efKgPskuxymDQ/:Nm2zbAJVbLhEn+oeBo6MxuSxxk/","tlshash":"0aa2e12d4eb6c1d7b9e70e71c8c70339f995e21313a3aa20d743373925b84b4a625934","first_seen":"2025-08-05T21:04:09.206984Z","last_seen":"2025-08-05T21:04:09.206984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 96a93e071a305694-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1227654\r\nexpires: Sun, 26 Jul 2026 21:03:38 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5smgT4XIitIqqGFKGigsqJwcg5k05AMIKO19RdTNp2QNl0L%2FI7ht%2B3h%2FMSWW%2B8Qhny2dlbUSP5hvUDQqYNF056lPh6Qn3SdNCqyk%2BuBS4Qu83vjUE7hhdUMGf5SDn1srkkcMCb%2BY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/176b159565394c49-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /176b159565394c49-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51008\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oxCtUVyo%2F34QsnFjPgACOHZkshQ5Y8gUbVUH1p2Zilx6bJ0LJxtGvQVUGJnXvZcOvHEirg6J56EKBIaCEG3UJTuxaaxJ3Ad22fasaSorhNCViqu35I8QjP%2Bi6GieMWPf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"c740-63aec9a3f5a57\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96a93e09c8317127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2491\u0026min_rtt=0\u0026rtt_var=3046\u0026sent=593\u0026recv=433\u0026lost=2\u0026retrans=2\u0026sent_bytes=466035\u0026recv_bytes=29019\u0026delivery_rate=17139012\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21710\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2181\u0026inflight_dur=199\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51008,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51008, version 1.0","md5":"de9692f86990a2d7745fc63789877605","sha1":"c96e641c4c9962d8a7fddedfa6c167e6b391c71a","sha256":"0392b42f14368f80ec6d6b8359b605d9a2e3e4b50fe3d733466d67e2a289dc19","sha512":"8e47da97bb236ab08a5c06eaa5969490b81df7885893751afb8a2688fbbe0e8361405118259fca7292125febbb5e05b89df2d4332968a9936d50cd36717098bc","ssdeep":"768:/t2qFhz0QhclMI5nPghPqfch7L2nuDQ6njZl884v1LjwdAMO5c5KRuU/J8CgArk8:/dF0Q4MI1P+PXeT6njivh86HmwJd/","tlshash":"ec3301f3246745bba4ad69fe03a4fdb631032568805439a84421d542bdff1ae33617eb","first_seen":"2025-04-26T05:32:18.082175Z","last_seen":"2026-08-02T01:54:16.972784Z","times_seen":209,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/stablecoin-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /stablecoin-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1495\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nYw81xivjvuHKcXu2wtEFi2fw0mZFCQytrbH5BqWOfdnLmmNqQYiVVMYVdTNvFGzvN%2BcrrOdd%2BtnS3yHc5De%2BbP%2Fuay7%2BRLAK3DMesWF3E1j0mIGab1wFEkIxU46Fyl1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"5d7-63aec9a4b163f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e09f8347127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5454\u0026min_rtt=0\u0026rtt_var=4886\u0026sent=937\u0026recv=466\u0026lost=2\u0026retrans=2\u0026sent_bytes=918088\u0026recv_bytes=31509\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2419\u0026inflight_dur=353\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"d2f3dc7503a85c12c92f39bb4318af97","sha1":"43a7d5c3d0e363a0909dbdd273c9d4ebae6491c7","sha256":"426d6dd66401bd421b9e9f760a0ad4fa7ae6fd74e444dbd00fba043da22fc30a","sha512":"9224eec86b514b940b9be91b11313003f78537c54d802f91e98a6f0cb484e8250e9d2bba2a1f2f61aa8fc4ff96e994ab513505687e143bf0d3674376de27c663","ssdeep":"","tlshash":"ad31294fafe0d659a6ac69a008f6a7d44b163d6cc27b0b16f350089bc021281a5ea302","first_seen":"2025-08-05T21:04:09.213568Z","last_seen":"2025-08-05T21:04:09.213568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/cards-hub-title-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /cards-hub-title-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2750\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9JECPPoF6CKULcAY5jJAGhcSJV%2BHz050wfWK8GZP07zInLNH90s2iiLFUKMBIfr8F12Ge%2B2KXgS4RhzBRNgads%2Bjltook3wKtPTZeQfyQZDDmnmfSwyxQs%2BcWJ2d2GgA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"abe-63aec9a40fc4f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06dfec7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=541\u0026min_rtt=0\u0026rtt_var=465\u0026sent=330\u0026recv=387\u0026lost=0\u0026retrans=0\u0026sent_bytes=137245\u0026recv_bytes=24693\u0026delivery_rate=6973709\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21001\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1778\u0026inflight_dur=56\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 83 x 75, 8-bit colormap, non-interlaced","md5":"08665ca49754729583d5fc28e8d0de53","sha1":"5e00efc9c33e980863dc4cbf74fa5ffc36feb274","sha256":"e187512d521d528ac018d6099f252305872f863c57463f7ebc7441980ca5210c","sha512":"01f517fcb09c6042ecb7fbdc6af9b8a11e7faed1de192d69bae3a0d1128b0897ab4b0ed872b21d3fc526f389a30712613ed38b15aea6532f5ec4746c4fe5848b","ssdeep":"","tlshash":"15515cf86e5e86210c5de267e2c16bf77b4795f0a30fc09be80bbc151a880558d4fa42","first_seen":"2025-08-05T21:04:09.220791Z","last_seen":"2025-08-05T21:04:09.220791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/favicon.e67604f4.ico","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:39.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /favicon.e67604f4.ico HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:39 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RRSndtiGZGWXm9tvY6KiBm0UwdRpwxEjpgt7HPAIMrK6d%2F9fK5c2DiQtN3t4hCzWi1C0i2JeksLxKBJp5A%2BIdiVYHn69haaSflhdFjPY03x8rCGwQShO2F%2F8D%2BZ%2By%2BAX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: W/\"11a1-63aec9a41523f\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 96a93e10888d7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1141\u0026min_rtt=0\u0026rtt_var=444\u0026sent=1349\u0026recv=504\u0026lost=2\u0026retrans=2\u0026sent_bytes=1468128\u0026recv_bytes=33642\u0026delivery_rate=42056187\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=33529\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=3347\u0026inflight_dur=469\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4513,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"58f253a2987229d91f39b2a315dc7e06","sha1":"e1cefb36a2b8e925bbcdffd26d794a79b3b719c4","sha256":"ad621b91c1227d007cdf56ecade5bea488e6f2399b2f244bdcad23aab11e0264","sha512":"ae7ff1223832c7292cc3d15be2b5391322a5fc6f0f64f602f731565e943c94aa65101df8d3c001c82a9f8fd58c8c9a07728715e4009c5800e9f20243c973d8a7","ssdeep":"96:WCUbQi0HQ93pWndz3qUalDHjZ9hEey6C1Gps+MWtRZ:WDb4wVYnfaNHdvy6tLtL","tlshash":"92913ca7c7d406eec53c6b7812c38f215d8887f9100343aceea0d27ea966f46b905b17","first_seen":"2025-08-05T21:04:09.224701Z","last_seen":"2026-04-01T03:11:00.068095Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/912f584956a9701a.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /912f584956a9701a.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1017-63aec9a40bdcf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PiHe0GN2RI8DETO7BoeqKaagF1319ZlaKhMLEmKawv0SqKtjps4qp0NGicuaC83uogdQshVtvjPlCq18GU3KgBJKJHUTZA%2FzH2Rn\"}]}\r\ncf-ray: 96a93dfd9bea56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4119), with no line terminators","md5":"abf84840e22401d07dedef1ba4b2c159","sha1":"1e7777fb999d4e71f8e32d3a54e0f02631e62e70","sha256":"0734ef13beb719be2e83789f0cc64bcd99042396e5252d09c147917c68e4672c","sha512":"4e68014adc3258db04c4ba0e4821a4c5c7b36d525f6bc3f35093e9341dba21248a31670ef3e43564d3a23a91ef95f48316cc72c40abfa185e2be2e390f8024d7","ssdeep":"48:qS9fo3vvZmMTPCAHnErIRrnPmVqw7vZqyRpFfKqdKzG18ZTRnEYx5wy:Dh8v5TPCAHEmriq6qq6t/TBrgy","tlshash":"8a8104725329506cf537c661fde03b8a312dc00af537096de7a5a91cc4da1833aa6f6d","first_seen":"2025-08-05T21:04:09.230613Z","last_seen":"2025-08-05T21:04:09.230613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/176b159565394c49-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /176b159565394c49-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51008\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BeC76pL5o58ypmbJUWsfxvcEYlczX8AGOOJ0XpEQj3JDm9PAFOoF72HoEVxfJpwkdbMEVnd1EolC9IClnL0euVodHXjDyufgUiVG%2Bbzl%2B%2F9mJfGqBJEs0G6p%2F3JfbAcq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"c740-63aec9a3f5a57\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e05bfd57127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=961\u0026min_rtt=0\u0026rtt_var=1047\u0026sent=262\u0026recv=363\u0026lost=0\u0026retrans=0\u0026sent_bytes=47331\u0026recv_bytes=21954\u0026delivery_rate=1542480\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=18330\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1704\u0026inflight_dur=34\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51008,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51008, version 1.0","md5":"de9692f86990a2d7745fc63789877605","sha1":"c96e641c4c9962d8a7fddedfa6c167e6b391c71a","sha256":"0392b42f14368f80ec6d6b8359b605d9a2e3e4b50fe3d733466d67e2a289dc19","sha512":"8e47da97bb236ab08a5c06eaa5969490b81df7885893751afb8a2688fbbe0e8361405118259fca7292125febbb5e05b89df2d4332968a9936d50cd36717098bc","ssdeep":"768:/t2qFhz0QhclMI5nPghPqfch7L2nuDQ6njZl884v1LjwdAMO5c5KRuU/J8CgArk8:/dF0Q4MI1P+PXeT6njivh86HmwJd/","tlshash":"ec3301f3246745bba4ad69fe03a4fdb631032568805439a84421d542bdff1ae33617eb","first_seen":"2025-04-26T05:32:18.082175Z","last_seen":"2026-08-02T01:54:16.972784Z","times_seen":209,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/8888a3826f4a3af4-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /8888a3826f4a3af4-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7740\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=J0y8yn59HMEUM2QyJYTYAzYL1qNyw5fUpgLYkrCTwDwSzNMikaqI%2FRfjzxY3wBYm6ewPWCGGu7tNydYVW9ZaEENPVwKtXXyKW6ckoZcrvqxwrkdS46OLwzlT9qQJK4og\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1e3c-63aec9a40b217\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e05cfd77127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1947\u0026min_rtt=603\u0026rtt_var=1663\u0026sent=242\u0026recv=356\u0026lost=0\u0026retrans=0\u0026sent_bytes=21596\u0026recv_bytes=21643\u0026delivery_rate=549307\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1685\u0026inflight_dur=16\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7740, version 1.0","md5":"792477d09826b11d1e5a611162c9797a","sha1":"bba020c0fd0426079872fdd7929a260b414845cd","sha256":"289e0afc8be731a86822349e54557296f145926496bd2138db1bac0db77f77a2","sha512":"20256b7428ae94d47202827e0d655e298034108cc927fca3a43eda383b02fd42f0c9e7551eaffa0ab4fc2e80528d17166aae09226bbf3ad21f666f08aeacc4ef","ssdeep":"192:dxQxGIAcBZH2KRme6/xXOTTsncYsl62qMXApY:LQcovWK6YlYsfL","tlshash":"88f1bf724a9790cac6e1592b83507e1ea877abdc3a4bcc1fd5d270ccd4a299123cc85c","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-13T21:00:48.334154Z","times_seen":13939,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/hub-advantage-1.8d05cf26.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /hub-advantage-1.8d05cf26.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/04d3ad31a27eed5a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 119032\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RR%2B7DcBSvFoL%2FVXrcrPZFInHC8%2BwM6hZXP9oP3FClJ0JE51qAr0NG90uRlc%2BFRQQm8XtArAnJN5H3DHyTKGhA5hUPNkSx%2FrMvBZ2xQIOMikDL9AyhQ1cjHRjnFv0BpjI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1d0f8-63aec9a4161df\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e0998247127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2455\u0026min_rtt=0\u0026rtt_var=2116\u0026sent=811\u0026recv=458\u0026lost=2\u0026retrans=2\u0026sent_bytes=753501\u0026recv_bytes=31098\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2345\u0026inflight_dur=280\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 562 x 320, 8-bit/color RGBA, non-interlaced","md5":"59cd510d4da3ebe22fc6f89c21d9f05d","sha1":"11fbe978b5f888704cef76f46b5e30321cdeacf5","sha256":"ecdece212f89a57b68c14320be038a8c806e71e3d20b3c1183b1b02fbcf6fb41","sha512":"e3a4f2194f8a9717875c3d42b9889dfa6e789fd1d0d8cdbc868f59d02751f57ada1844b116a3d3311ebc9d4270f1f228fce1e85245fb44dda33d0395e7f35176","ssdeep":"3072:VmksD8j0VZlrPq3LqzgY0/05yKqCHa8EWp5kc:VmksD8jufPq3LqzT0/f8hIc","tlshash":"6fc312e2a3c5092f6a25610317f0166fe6e41550887dbae0868d52c5c76ec5ecef7b0e","first_seen":"2025-08-05T21:04:09.245628Z","last_seen":"2025-08-05T21:04:09.245628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":258,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/262ee746b5eb51f93795cd3cc67ee24626d1d58f.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /262ee746b5eb51f93795cd3cc67ee24626d1d58f.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 15473\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"3c71-63aec9a3f6227\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlsHybGxsok711uyAJLMWKBGlRDI%2BlSA5AafT8oI4mfJGWRgnNU4AYUyNkBgWqtzP%2FCjLZL4Ve%2FSMG8BQmvA9Diu%2F8sLgvD9m0dy\"}]}\r\ncf-ray: 96a93dfdac0456b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 389 x 133, 8-bit/color RGBA, non-interlaced","md5":"f117d0614570152855a9cad7c9aae506","sha1":"262ee746b5eb51f93795cd3cc67ee24626d1d58f","sha256":"222c5bced7674ce6acc9583e59a6608aa420c0f257575ec4de7de6aa9f2c96c4","sha512":"45094bf253e1bc154ef5834efd33efcdeaba06071e5ceba054ccd5556a4efbdac5cdb0de1070f7f29ed74a2adaf3156dabcfd2a62a8ac90d953295c392ee36b3","ssdeep":"384:/LGJMrt7tyxQpFRnfTCR/7/iVt6ggcetsyswpQ4zrageiJGgsI:zI65Rn+UGlsysrKeiJGgf","tlshash":"0362d166776349c5e0096171021de75a08c9cf748f85d92d86f8f3920ca26c99dfef27","first_seen":"2025-08-05T21:04:09.249737Z","last_seen":"2025-08-05T21:04:09.249737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/hub-pwa-bg.a53d233b.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /hub-pwa-bg.a53d233b.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/04d3ad31a27eed5a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 228314\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2i5bjBtzayPy0AQuroXspfEu%2FQ11XKMkuNEvOiLmg8Yh3CzcZbyw5om0YUxGH0vqHb89Ls2dw44TEVHAQe7fy49jp28AZLVZbGMex3dIrKsKiTaNypuoTg9pQSlkLjI3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"37bda-63aec9a41bf9f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e05bfd27127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1947\u0026min_rtt=603\u0026rtt_var=1663\u0026sent=239\u0026recv=356\u0026lost=0\u0026retrans=0\u0026sent_bytes=17396\u0026recv_bytes=21643\u0026delivery_rate=549307\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1681\u0026inflight_dur=16\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1400 x 264, 8-bit/color RGBA, non-interlaced","md5":"cf8ded7bcfd2e5b8bf1fd85d7773fcaa","sha1":"a641320c13883281c4e95b62b8929f9422918d36","sha256":"55e8d7aa244425b66efcb1670af9dea05dec7563905b589701081c83c8a48bda","sha512":"02fa013362f480b0b947406e494eeb77a79b8d1754f4cf0087b3cef8385bb5bc1928edf968272b1034d0170a093cdce7694964eb69725e3ea5ffe62253d63fde","ssdeep":"6144:30C1BidfIbP5Vq3dfqMnNhOcN2dkDY9O9+LFh:30CjP5U3JNxN2d7I0h","tlshash":"722412a19e3dcc5171feda29cb0c6901abe423ae755458d6ca812070f7afd037c5b29b","first_seen":"2025-08-05T21:04:09.254126Z","last_seen":"2025-08-05T21:04:09.254126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/index_4.html","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=M4C0R6J%2FWnO36u0RvEpXIgZbuhURkLfAuhGCNMScN49cN8CKhYDiN%2FsHJT1rgn4VKIN0z0xNCjBWw2ImwMiXGQ%2FlErK9hD%2FQk7v21pK0tP97lMtdsudLFkDAt%2Ftcs3Ha\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: http://cyboo-io.live/_4\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96a93e063fdc7127-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1947\u0026min_rtt=603\u0026rtt_var=1663\u0026sent=242\u0026recv=356\u0026lost=0\u0026retrans=0\u0026sent_bytes=21596\u0026recv_bytes=21643\u0026delivery_rate=549307\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1682\u0026inflight_dur=16\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cyboo-io.live/\r\nOrigin: https://cyboo-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":133,"dns":10,"connect":40,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.50.34.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyboo-io.live/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://cyboo-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 26befb1278580d5b5c07ba0bbd2d3843\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/hub-advantage-4.29db8016.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /hub-advantage-4.29db8016.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/04d3ad31a27eed5a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 103564\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kMPOxf02bzihzmigvtCTFXXydADYAkDuhgiEtL15RUlb7MAbV%2F56LEqMKK0XuQESXvwYrJMIgRYWrpnz9nLOWFm3E2XoTVYmZp5anidQP1cPrO427OeDTBCYSFljH5rT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1948c-63aec9a4188ef\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e09b82e7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5644\u0026min_rtt=0\u0026rtt_var=5566\u0026sent=878\u0026recv=462\u0026lost=2\u0026retrans=2\u0026sent_bytes=839742\u0026recv_bytes=31297\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2391\u0026inflight_dur=323\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 321 x 184, 8-bit/color RGBA, non-interlaced","md5":"11d49b86309deef056443c3e85c51d6d","sha1":"6d25ec581d05374516066d0a9c07a51a71d6bf06","sha256":"6ac343e8f07e75b456daaefae6bb1d9410210962eb0052bb4754d597a90ac4a8","sha512":"9f8d8f3c57e323dd53d895628ff7a8728ba6e0092fcea918b4af30c05a24a05f31105d51a4e07176220bff41042ce819ddd273d34185bc38dbcc8864f11d7520","ssdeep":"1536:i2Bl5v5TDN+WlXuocYq15XDj6U8B2stVHN/bHasea2ifSS+aV+gbYjPfFDVyBAy/:i2ZRN+WlXmh5Xy92g6r1S3NKj17Oj3","tlshash":"9ca3018e4da6494b44d89d12fde2334f7668fc3c4a606e98bf992d546d2f605ca03ac3","first_seen":"2025-08-05T21:04:09.261776Z","last_seen":"2025-08-05T21:04:09.261776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/cbf601bb5513d1fe.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /cbf601bb5513d1fe.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 1062\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"3b53-63aec9a410bef-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIOTGoIfl4W%2BC9ksvq%2Bm3oNNY9UcLJjbAZH4%2B8l%2FuVzUj0FlbNhFfhRAyIUunFHoM96MLJwE8Yv5vxyXwBKTc9M0sqM78D31KqhY\"}]}\r\ncf-ray: 96a93dfd8bd356b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15187,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15187), with no line terminators","md5":"889590350291134f24a9ef633b9ee13f","sha1":"aeaaebcf45e80c3143d36e5f27cc3bfc6be07ae4","sha256":"4b5363aa391dfbfd005a8d48febdb0513e5ec93768baa014ca7ff88133a01452","sha512":"5966bf1ceb0bc80ff8d474a9daf566de356fc67c39b0a4be14171005292490a021e4b6d767a3a4e264acdadb308f3e78f06a583208071259373c2a4864fafb4a","ssdeep":"192:Tx8Y3xqYsxQYyxMYwxoYxYaYnYIFxqYnxcY9xAYa9:dVBzmZslaRSjYI/zx1XJa9","tlshash":"27624730802980aed5b2fce232cd7f13397c601456d48926de2855698eebc7b73e5b6c","first_seen":"2025-08-05T21:04:09.264673Z","last_seen":"2025-08-05T21:04:09.264673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/new-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /new-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1208\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nfBANA5pdyhZspeOLMNsLicKqjdA77shkHmnDW0VZccBqLht5rk%2BYYPG9UM4qyH7QRnZp5j5bUbjoh%2Be3sPDo19PjkVgXnsYn7C3majjuT7g0M%2F9MEkxhXk4nZtHt9Gs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"4b8-63aec9a478fe7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e0a08357127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2455\u0026min_rtt=0\u0026rtt_var=2116\u0026sent=791\u0026recv=458\u0026lost=2\u0026retrans=2\u0026sent_bytes=726514\u0026recv_bytes=31098\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2330\u0026inflight_dur=248\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"638e39cd496ff8b7de8c76dcf2786c28","sha1":"199d187b22396b98ee9564843e084c3d84e19ea2","sha256":"18198297f49bcdcc4565bf3abb8fd779150aadefee5770c18fa940774bc19858","sha512":"e2db9d01dd979cb816d728566d473e1500d1c0112103bbe133e7fa568186d78b0ed192dba07290155624488ab0e04f43513b08df296fec4ec0ccf12814ba0f58","ssdeep":"","tlshash":"3521b7d54a6b587f862f5262b5c1e0335f362463012b83b11a8d788b5c0631907f67d5","first_seen":"2025-08-05T21:04:09.267733Z","last_seen":"2025-08-05T21:04:09.267733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/hub-advantage-3.c87a1ac9.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /hub-advantage-3.c87a1ac9.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/04d3ad31a27eed5a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 390059\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BYF6gIQGM6xTPMhiQPBDueLw09BuI1oUzBu2Hs7BZCaibGs53va4M6qy9YXlPJP8e0YpDufs0n8FGAu6rDWe700dsKWOkJ2JxhhPLKp98M4DZgo7nriWlfl2bttcZIem\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"5f3ab-63aec9a417567\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e09b82b7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1059\u0026min_rtt=0\u0026rtt_var=471\u0026sent=708\u0026recv=451\u0026lost=2\u0026retrans=2\u0026sent_bytes=616658\u0026recv_bytes=30549\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2246\u0026inflight_dur=217\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1019 x 320, 8-bit/color RGBA, non-interlaced","md5":"79efbfcad26f41d0710ac49bbfc4e76c","sha1":"6fc4a93f8ec63bff911f032ce4778a09a2084f27","sha256":"206ec00cc254b0a0fa20e1b9f24f59083204aa0954c05aeaf086f3847f8aaadc","sha512":"9bcca57a9fcbbfb6b4960c8460890fc35da816ae8326e3cf93cdc8d3a4061e34c21e0b4f7dcd8c5e43cdd7478bc5eb144a93cff1802a2cc84caaaa0af385be7b","ssdeep":"6144:wGiKm8BVZIacfX9WAIQGkCmpeMrUVMysg7ftgN/+gZz5WwWnqL9S0u9i7+pcaIxO:wGiKm8BV2kN6pQVM5gZm/7zgWL98iXxq","tlshash":"f9842393f307aa16956b79743e5c60a15fc8c8eb90230c9d0b5211715c84899befbbfb","first_seen":"2025-08-05T21:04:09.270552Z","last_seen":"2025-08-05T21:04:09.270552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/hub-advantage-2.0729ce9e.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /hub-advantage-2.0729ce9e.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/04d3ad31a27eed5a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 91881\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hiHI6uKAgKib98PFnxZ7kj1Adi%2Bo5doPCVTNUvbgLbzzWwcK7jTchzsLJnv95tjBDdYFwZ2EEF8YpBGEFj9PwpJr%2BheIZphHGnDEHARkzMJY%2FGK%2Bv%2BNDeMuSQW7XRn38\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"166e9-63aec9a4169af\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e09b82c7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1058\u0026min_rtt=0\u0026rtt_var=701\u0026sent=675\u0026recv=448\u0026lost=2\u0026retrans=2\u0026sent_bytes=571885\u0026recv_bytes=30410\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2224\u0026inflight_dur=210\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 214, 8-bit/color RGBA, non-interlaced","md5":"274e7a894b31437849a5d9260e7ef577","sha1":"2c3d467f5634c5fd69673c93ad12ccfe4f5a9aed","sha256":"42200842b9f61bf38629fb35d654bf193091be14a679036b1916d7594ad7e54d","sha512":"7f48a44352d2110f6293ebafd27ceb949f79cb3846f2ea5d9c56d173aa88e7131611d9b9170fda410884e8c836516e472fb075a77c3528029e037ae455301f2a","ssdeep":"1536:Jal0quwUTUvuT5M4VHeDmfL6BRhspjr2WZdsp1jmqAc7TKWIigPodqDddN0Cd5nS:wl9qQuq4VHeyfEXMWWZd0uc72/iy8SNG","tlshash":"f5931216c4a56b33d1ac159fc52dc7abc855bdb0f300ba70c52d698f38a42f9fb40aa5","first_seen":"2025-08-05T21:04:09.273557Z","last_seen":"2025-08-05T21:04:09.273557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/176b159565394c49-s.p.woff2","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /176b159565394c49-s.p.woff2 HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/d8c59b140444835a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51008\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mc%2FJ2%2FMlBn4vu%2FbKgNpCkPlFI%2Fypp7ZlE%2Bdk4j9t15zA3hxYcX90fUuEfOE7bhvetsIcPLTZYf8h%2BxDvHIkR1a%2Bu%2F2UTz4iuADXMNrg39BHzx6%2B6yCfSQ%2BLdMNIz%2Bf5f\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"c740-63aec9a3f5a57\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 96a93e09c8327127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1391\u0026min_rtt=0\u0026rtt_var=1411\u0026sent=633\u0026recv=440\u0026lost=2\u0026retrans=2\u0026sent_bytes=518930\u0026recv_bytes=29329\u0026delivery_rate=17139012\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=29788\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2185\u0026inflight_dur=203\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51008,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51008, version 1.0","md5":"de9692f86990a2d7745fc63789877605","sha1":"c96e641c4c9962d8a7fddedfa6c167e6b391c71a","sha256":"0392b42f14368f80ec6d6b8359b605d9a2e3e4b50fe3d733466d67e2a289dc19","sha512":"8e47da97bb236ab08a5c06eaa5969490b81df7885893751afb8a2688fbbe0e8361405118259fca7292125febbb5e05b89df2d4332968a9936d50cd36717098bc","ssdeep":"768:/t2qFhz0QhclMI5nPghPqfch7L2nuDQ6njZl884v1LjwdAMO5c5KRuU/J8CgArk8:/dF0Q4MI1P+PXeT6njivh86HmwJd/","tlshash":"ec3301f3246745bba4ad69fe03a4fdb631032568805439a84421d542bdff1ae33617eb","first_seen":"2025-04-26T05:32:18.082175Z","last_seen":"2026-08-02T01:54:16.972784Z","times_seen":209,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cyboo-io.live/\r\nOrigin: https://cyboo-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 96a93e0b3f3656b5-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4010\u0026min_rtt=528\u0026rtt_var=5703\u0026sent=11\u0026recv=13\u0026lost=0\u0026retrans=1\u0026sent_bytes=3592\u0026recv_bytes=1145\u0026delivery_rate=6369501\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=179bf2c16516ba74\u0026ts=248\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":93,"dns":11,"connect":1,"send":0,"wait":111,"receive":1,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/04d3ad31a27eed5a.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /04d3ad31a27eed5a.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 2861\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"29aa-63aec9a3f5287-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBroCIy8jNAmr8eSQMm25o8zlpz%2BGVR6rXj5LmV%2FIoThsfgjHsOOU8hdU%2F%2BGCGowO4dbH4s7UoOywtcVcoeqFGb7c2fOtU6Hk%2FKL\"}]}\r\ncf-ray: 96a93dfd9be956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10666), with no line terminators","md5":"755c4850e946f80e2a75e7c9eb06fcb8","sha1":"4306492f2822c1554b3e18403c05f237f3a88b91","sha256":"24ddc7a1308dccaa55e1abf7c5e2bcc3f9816e2634721e0326bec4043f51e5d0","sha512":"2459497d4a45723f3773e69aa215c468c183a8a7c0c4b483d481f1ae611b8888fd0d8c4cd5d8ac2d1cadacb4d5f4f9fed2575b628e4fc66f16ba37dee0b05f8d","ssdeep":"192:BVrSEjwNGYiGaCGc08FrDda0HJ8pALx3xboeckQncQdnWp:TfUoUKpArDda0HupYhbRQcm8","tlshash":"7c2241222889b53db0af8225f0b277dc213dd143d62b5b7dbb21b6bb86db1c00573595","first_seen":"2025-08-05T21:04:09.276554Z","last_seen":"2025-08-05T21:04:09.276554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/user-hub-title-3.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /user-hub-title-3.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 3290\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=noouxMr1rnVGa%2FUHZWyRLZRP8LLZAGzjyc%2B3DwmE5yDPScF2i5IWRX8OJ5X%2BvzGdHNuPm0m%2F9%2BigWjNB1HM%2BQ9JCXEofc8psf6gmswM1Pn3F%2FDQp7Is5YQ%2FCJY3b0uHT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"cda-63aec9a4d5477\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06dfed7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1184\u0026min_rtt=0\u0026rtt_var=1635\u0026sent=354\u0026recv=388\u0026lost=0\u0026retrans=0\u0026sent_bytes=168046\u0026recv_bytes=24739\u0026delivery_rate=6973709\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21001\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1793\u0026inflight_dur=67\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 63, 8-bit colormap, non-interlaced","md5":"fdf11669f206acc0f6188b3b465f497b","sha1":"e132227f211b118a9eca7c828e43570c8090a49e","sha256":"55142d80c626942acf8b120a7287899c87cab06006e7913fd3dcf94796284040","sha512":"01b8e3df23e802096c1072106c7b8774bdb835a6a9ff6b05daba3c8500bc43ac1b7c276514a58837cb405b45d2d6a58eabcc8d3d7f3c3e159f1ca855e25c3362","ssdeep":"","tlshash":"14617dd3ad71478810dd04ea2f1814694b880f09bd0122e6b7c9b01f1a7adbbde4e22d","first_seen":"2025-08-05T21:04:09.280126Z","last_seen":"2025-08-05T21:04:09.280126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/hub-advantage-5.19b1eb06.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /hub-advantage-5.19b1eb06.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/04d3ad31a27eed5a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 153034\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X2H1KnYpq4OI5ESb2YTa5AnRjql82iVmznJx%2BEQf%2F51288K3lMsIN6cKz2XdGURgtM9YtCoBgix7V5v%2BOJzMTfdroDZsJzJhTh4k3A5s1d8m%2FpCvX6NxMdB3mLP0qmfk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"255ca-63aec9a4190bf\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e09c8307127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1025\u0026min_rtt=0\u0026rtt_var=422\u0026sent=709\u0026recv=452\u0026lost=2\u0026retrans=2\u0026sent_bytes=617362\u0026recv_bytes=30596\u0026delivery_rate=21424089\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=28307\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=2252\u0026inflight_dur=220\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 681 x 320, 8-bit/color RGBA, non-interlaced","md5":"51f8b6b8e5d03a8ab58cc70115c16e05","sha1":"e17353bcb27b15ca1535315db94327bb4120c484","sha256":"09bb74ac129b991ecf556422dc9891cab8da9c01296bad118a29312368cc7272","sha512":"5a325b965b16b69996a6d2eaf9d9c492daa201df67d215da4fba0b2c342ce9c7505a7dee547dab6fb3e180d36983183988f317342baabeb46313c44fc0c9f47c","ssdeep":"3072:C9xU9SpL7eHnL2pMqnEYFuGoe4sk/F5v9lblpU3+m4OqsQs9Ph9+1C/:WU9SleHnLwEYIPs0zlhO3HPlh9mC/","tlshash":"d9e312bc5ba11988801bd86273bf2bed53e72559290a4b63d0ec5f135646300b0fa9ff","first_seen":"2025-08-05T21:04:09.283137Z","last_seen":"2025-08-05T21:04:09.283137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/css2.css","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:36.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:36 GMT\r\ncontent-type: text/css\r\ncontent-length: 638\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1dcc-63aec9a411f77-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rCTlDf5Nxa%2F7xok0XlkodvMiu3xMbVABlZPJaMqiYvAWICBSXWJWYOuyFgMEUHj18%2BzVHo1nTpurUPH5MUqqRuHRPQC0lZvkNSDv\"}]}\r\ncf-ray: 96a93dfd9bf056b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-08-13T18:04:01.713178Z","times_seen":632,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 96a93e04eddf0b59-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 570914\r\nexpires: Sun, 26 Jul 2026 21:03:37 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZNUG4rL4Lr%2BrC9sctPBTCTuWBRJwg75lgGKL66Cy36NVIXfikkm1L%2BBR2Ze31xAYxKBfFFAvK9cLlUc1J44ELtbpjpq4sgg3%2BmKyKKHyOO8FQR1Cze9bNBKXr5sCQ2TrPMufgw4p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":13,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/index_1.html","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TJxLOJDQt0zpVsjkSRxUCXmedYj7ut1CbkKj9ho7WhUhZ64Rt9maucC6VStwP7mJSbhRp41YhJKdWmuyS4eval9qiR3BpTHWOM6AteWE%2FcWUU8dzvI3BY3vsS2WwFk9I\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: http://cyboo-io.live/_1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96a93e063fdd7127-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3258\u0026min_rtt=0\u0026rtt_var=5374\u0026sent=362\u0026recv=389\u0026lost=0\u0026retrans=0\u0026sent_bytes=179246\u0026recv_bytes=24788\u0026delivery_rate=6973709\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21001\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1812\u0026inflight_dur=88\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/cybro-hub-title-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /cybro-hub-title-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 2470\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sEtzLZbcnOuC0GDefYjplFrmnk4X1KZhJoUZ5w6MonSu6GRcQJktwemKDUyyMesPA2cSNxQ9VydN8C3iaOzQ%2B7acb5NOCRvj6jF6Atjei54A1xcPsjlI%2FtK63HjU9Lue\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"9a6-63aec9a412f17\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06dfeb7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=541\u0026min_rtt=0\u0026rtt_var=465\u0026sent=337\u0026recv=387\u0026lost=0\u0026retrans=0\u0026sent_bytes=147045\u0026recv_bytes=24693\u0026delivery_rate=6973709\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21001\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1783\u0026inflight_dur=58\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 123 x 74, 8-bit colormap, non-interlaced","md5":"bb84ad43222c1918643cd28fe7898127","sha1":"01c4bca748c7ebfd4fd86fc238b06af80e31cf92","sha256":"3fd780ba7429e80fdda9504a9a55b15d997e222aaa3b640831581d68064ff380","sha512":"e4f256551de85694d3d3c834d523e72d27820a8edc1ca794b6e172adf9e72f26aa9ec3a5e751a105ba0b3184bd6c1b4f74fe48fd209eb30971df7a03511d372a","ssdeep":"","tlshash":"41511ca5aa8ecdb9422157ec71d7f3f47f131a6b78807f0455df41211424bc304b4934","first_seen":"2025-08-05T21:04:09.290551Z","last_seen":"2025-08-05T21:04:09.290551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/certik-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /certik-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4181\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G%2BMgYf2yW6in1nMDDPOnsJ5do5ynqeh4KncsWzWqUi29Ci9C8M0%2BbLR%2FbtTsLbNwc5faHpn6M6vnCNYrq1slVFmHNOK0S5UyVOxkMMeQQO5JCrmCvrRkxxPkXp6Nnavw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"1055-63aec9a4113bf\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06efef7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1082\u0026min_rtt=0\u0026rtt_var=696\u0026sent=582\u0026recv=424\u0026lost=2\u0026retrans=2\u0026sent_bytes=460875\u0026recv_bytes=26469\u0026delivery_rate=17139012\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21710\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1924\u0026inflight_dur=184\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 122, 8-bit colormap, non-interlaced","md5":"4479e8758c4f6199162b4364c0ec8fda","sha1":"18ce9e1e89c16e2079d65a9c5e0811cb230a10b5","sha256":"0a3ad38ef05de5e5a793d7290d72a89718bdca36fda8917e22c567e07f29b8ae","sha512":"c15586b9b04ffd2c1414763777a33779675a8cfd0f23b2bde06710d9eb48f9b89d2d82a360e011c237b3bcc92396849569cd5fb7be2cc80f7fa903335e8fa5e5","ssdeep":"96:AvHUGc22Q4c9Lz1ZV9VGElGUPX9yeeDbzqL5SqNtxiFGU+41mU:MUGIfc9LznV9UKG8X99sXqL5Dn37U","tlshash":"a0817da7654a243906f696db3f587148dbaf1f922a05a33065f2373508a532bcfb12f1","first_seen":"2025-08-05T21:04:09.294142Z","last_seen":"2025-08-05T21:04:09.294142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/index_2.html","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:37.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mtVlQ7Np3jfa3AG93KSwP4tc7zxX%2Br8LisDkPWuUdQ0kMUZGtmpQGkzexF7Xeqyed76nu5PewL6qdW3aOuv%2BUbgiaxefD2MybeLF%2BgWCpejIBTXaXS2J4KD3puwsJniY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlocation: http://cyboo-io.live/_2\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 96a93e065fe37127-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2175\u0026min_rtt=0\u0026rtt_var=2484\u0026sent=411\u0026recv=394\u0026lost=0\u0026retrans=0\u0026sent_bytes=238565\u0026recv_bytes=25032\u0026delivery_rate=8717147\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=23359\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1828\u0026inflight_dur=102\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/assure-defi.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /assure-defi.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4747\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pok5u38IYmPzDu4jbWZaVN3aaGqZDgKqBG5DQYjHZsdKbfrG4GQAWebOwDLFcluK%2BhgPeJZqGcopUt7OcEg18G%2BXbKp7ZXAtWfmJTzFn2p3%2B4jtvs%2F%2BqGUFdysXRww97\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:34 GMT\r\netag: \"128b-63aec9a40d53f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06efee7127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1184\u0026min_rtt=0\u0026rtt_var=1635\u0026sent=344\u0026recv=388\u0026lost=0\u0026retrans=0\u0026sent_bytes=156845\u0026recv_bytes=24739\u0026delivery_rate=6973709\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=21001\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1787\u0026inflight_dur=64\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 123, 8-bit colormap, non-interlaced","md5":"bd3debc52f9f50941fd173ceafc2ea26","sha1":"717298f6cd6e9ea0f9535781f397d7bf81f009ba","sha256":"e08bc7c894aaf14d302a231d35dd1a527fbd594f3ada1b60738f722dc66a5d8c","sha512":"ac0b838720cb3514aa3692762968ec931f1ceecf4f8fd585a1097c7c533324c318044a4ec40473bd2305711f214428dbca5a207c271952f8525959c6b8021f51","ssdeep":"96:c0UD5i1SsiL2DBZGmoiU25XUJO3UKs3LUk0jtGAYfI5AE1FGLXFsMwZSv9+QO:wN8SrLk+ifXU048+I5AE1FOOZSl+H","tlshash":"c2a16da7b641748ce1f8057031174a4aabf718d97e81d5d8ca3b1234768f874795b485","first_seen":"2025-08-05T21:04:09.297054Z","last_seen":"2025-08-05T21:04:09.297054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cyboo-io.live/quill-audits-1.png","fqdn":"cyboo-io.live","domain":"cyboo-io.live","tld":"live"},"ip":{"addr":"104.21.3.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cyboo-io.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Jul 2025 16:54:50 GMT","end":"Sat, 25 Oct 2025 17:52:30 GMT"},"fingerprint":{"sha1":"06:5B:89:73:DB:93:49:1A:41:3B:B9:59:79:A1:82:28:4B:CD:CA:FB","sha256":"6A:B1:53:E1:3E:78:17:73:F6:86:5E:58:96:CE:E9:C2:F4:D0:FE:7A:14:7A:AC:FC:67:B3:E0:E9:49:EB:9C:05"}}},"request":{"raw":"GET /quill-audits-1.png HTTP/1.1\r\nHost: cyboo-io.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cyboo-io.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 4756\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yDmn7g1g%2Bd%2FJANb%2F0TZaq9qlXcSRrQ351Keg8OTXPG4XY8UcOg%2FrrYaEBUFB94r%2BSQqPMoH%2FSEfg6UaHjbXz3gBW%2BME%2BlkvHWFaTMh2SoCMU7kplMZdPFezNrSIxMwqD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sun, 27 Jul 2025 17:35:35 GMT\r\netag: \"1294-63aec9a47ab3f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 96a93e06fff37127-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1914\u0026min_rtt=0\u0026rtt_var=1916\u0026sent=473\u0026recv=402\u0026lost=0\u0026retrans=0\u0026sent_bytes=316819\u0026recv_bytes=25438\u0026delivery_rate=10896471\u0026ss_exit_cwnd=14910\u0026ss_exit_reason=2\u0026cwnd=33085\u0026unsent_bytes=0\u0026cid=e19bfdb3ddb55621\u0026ts=1863\u0026inflight_dur=127\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 293 x 122, 8-bit colormap, non-interlaced","md5":"e03341cd14273045a15164c3a919520b","sha1":"92edbaec60e1bfa40a096cb3da05ea0ef31fd2a5","sha256":"5caadfe5ea1221acc1552b71dd2b401ffd9bc33855cd0b8d570b9f563bdca2c2","sha512":"3d09c1bf10d3e4c0927fa4344238c776d7e86d2ffb673e1503a9a422fafed564dbc9defd8f740ce1a8a8310d5cd48cee555984efe324807bbe3dda56ffa4798a","ssdeep":"96:Rj/GMtsrUuNwE+9G6n1VNSdHhx42Zzz4rdUShPzd8tR:1DtcNwEyJDMpTvmdx9d8tR","tlshash":"a4a15cbac13ab5c5a648104ad012283bba9ca70c590cfa512da9c44e6772d696cf4762","first_seen":"2025-08-05T21:04:09.300364Z","last_seen":"2025-08-05T21:04:09.300364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-05","alert":"Sinkholed","trigger":"cyboo-io.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cyboo-io.live/","date":"2025-08-05T21:03:38.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Jun 2025 08:56:01 GMT","end":"Wed, 17 Sep 2025 09:55:57 GMT"},"fingerprint":{"sha1":"4E:C6:C8:AF:D7:68:98:F6:BC:1F:7A:02:FF:9D:87:43:53:C8:4A:EB","sha256":"10:15:05:73:55:F6:0B:BC:0F:B7:5C:69:4D:A8:BA:75:FA:56:A6:4A:89:07:1B:C5:F5:81:A9:2E:48:17:B7:E0"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cyboo-io.live/\r\nOrigin: https://cyboo-io.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 05 Aug 2025 21:03:38 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 96a93e0b39877127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T20:51:55.920032Z","times_seen":17875984,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":59,"dns":10,"connect":1,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}