{"report_id":"d8f79a3c-b42a-4c9f-bd38-0f26e606a8be","version":0,"status":"done","tags":[],"date":"2026-09-23T20:26:28Z","url":{"schema":"http","addr":"surprisedeal.shop/","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"104.21.83.190","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"surprisedeal.shop/","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"title":"BudGraft — rodinný rozpočet domácnosti prehľadne na jednom mieste","dom":{"size":32330,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (327)","md5":"4161a4e55e536e0251c597cae91c1683","sha1":"06bb3a9e7b31c9029d1c1b0aa6a6b0b2a0ec3b98","sha256":"69acc34bab92906bb6c1cbba632d23f78c64287ef9969e6b58f08f7466452a3a","sha512":"5529c4ef0e9b977af7974afca3339c948cdd2425c34543122d6e57e86d650e295fc61577586d3bf2a9926f6304748caf6badc33f41b3f2e998c670cb0f550f97","ssdeep":"384:R2Lct9aOdPlGQxp5ZEjWxgmq00ykgKKfTORP6lpyTntOanD3l3koMC3fMT0Cb:R2LcLjdPlZp5ZPGGkafTGxTntOAMmkt","tlshash":"76e2c86260f5a437816740c96ae61f2a3de5ca13ce1e0401b2ad0be71fdbf93ad1745e","dom_hash":"domhash2e86b8144b78bd90c1338a4e82687571","first_seen":"2026-09-23T19:32:55.660105Z","last_seen":"2026-09-23T20:26:29.227332Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"surprisedeal.shop/","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"104.21.83.190","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T20:26:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"surprisedeal.shop","ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-01T22:47:06.821541Z","last_seen":"2026-09-23T19:32:56.539368Z","alert_count":6,"request_count":6,"received_data":69505,"sent_data":2875,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"surprisedeal.shop/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T12:42:36.841965Z","times_seen":451493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surprisedeal.shop/script.js","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d50c7bac68f59148f22afe7b01b171db","sha1":"3b51f27540315164c3308c475d99e10ad6aa1503","sha256":"4f63c265dc7b063c302dee4208cb1c074dd7fc4026bf2780b9b4eee1265a480b","sha512":"dc6ed3cd763997368d06bfaf252333352da77cb22c3462bb27142093d6bc639fc98567528900f153cd6022379f4ecf8a4deb236f88435e1614d14aae6c8ffbd7","ssdeep":"192:bt95+zpIm10qgz/uAS1OA1xPd2Avemu48ccQ3DAf4wj4Gr6t2Gex7ttVKlRhvVjk:p9kOC0qSNey4Fo4erK27c6","tlshash":"8f12751f3cd324725afbf2faa79f6244f9a840031a05d9003c5c91554fb8e6a1abdad8","size":9032,"data":"","first_seen":"2026-09-23T19:32:55.66632Z","last_seen":"2026-09-23T20:26:29.231407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"surprisedeal.shop/","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T20:25:59.373Z","timestamp":1790195159373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surprisedeal.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 16:56:37 GMT","end":"Sat, 12 Dec 2026 17:54:22 GMT"},"fingerprint":{"sha1":"8D:6E:29:53:CF:02:89:43:EA:49:64:9F:8E:97:63:FF:E2:74:76:EF","sha256":"39:42:0C:60:FD:3F:8E:75:AD:61:D7:6B:06:CD:DF:9D:C5:3F:06:2D:FC:73:49:6F:04:0C:4F:60:BB:1C:5B:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: surprisedeal.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 20:25:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjiUkNLQgzqF5HKGIWCB8jZC6TJHde1xHD0SRFmpyOpkOe%2Fpj5RznakQWpoTYs0QOrDNGzgKqLIb6iZ7sqaH0xrGm1kr7%2BJbdOF1szsaD0iNC1xwDqNuz37EXRYlkp5TU34xBA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3fc48226f5232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32398,"size_decoded":10756,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (327)","md5":"1b1ba2ef595c1e961731e6eff284e48c","sha1":"ac5a9afbf949d01f81e6d9a29139fecd00a9b71b","sha256":"c5538e875ad2efa3799c0b11372eb4851944541d24d5a9b87c527f07a042bb6d","sha512":"71e3b3096f37511dd55354d8e573a7fd1d71fb60de044c367cd2788ff585641972bc2f99d84d61d8ebf14b651c3c1a2b72f6483aeaab2d79cc24e3ab7c8c4ded","ssdeep":"384:d2Lcq9Rd7OG9jp5cAjkxoetf0yk5KKUcORP6lpTTntO0yVoMC3f1TnCGW:d2Lc0Rd7OSp5cdvbk1Uc+CTntOsMmtc","tlshash":"f0e2c72264f5a437416340c96be65f2a3ee5da13ce1e0501b2ad1be21fdbf93ad0744e","first_seen":"2026-09-23T20:26:29.22896Z","last_seen":"2026-09-23T20:26:29.22896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":26,"connect":18,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surprisedeal.shop/style.css","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surprisedeal.shop/","date":"2026-09-23T20:25:59.852Z","timestamp":1790195159852,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surprisedeal.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 16:56:37 GMT","end":"Sat, 12 Dec 2026 17:54:22 GMT"},"fingerprint":{"sha1":"8D:6E:29:53:CF:02:89:43:EA:49:64:9F:8E:97:63:FF:E2:74:76:EF","sha256":"39:42:0C:60:FD:3F:8E:75:AD:61:D7:6B:06:CD:DF:9D:C5:3F:06:2D:FC:73:49:6F:04:0C:4F:60:BB:1C:5B:52"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: surprisedeal.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://surprisedeal.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 20:26:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 31 Jul 2026 09:40:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6c6d9e-5377\"\r\nexpires: Thu, 24 Sep 2026 08:25:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKKgnObr3j5YHv7OoCz8lbSreNCGCGJi%2FKBIrMWh%2BAJNuTl1P6EP8FmvQCd2TB9SGrOIaeqlntMd1Wu3KidtRS%2FLj4qgbM3o5pdkB3VCxqNjQKes2UAv0tb3Rc9Cs7BySdUeEA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3fc4825189832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21367,"size_decoded":6126,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"65375380606143742c094c38b05b5af6","sha1":"745a5ff4dcdef0db57834e23aff831b2fbc42673","sha256":"b7a14245f4a4e60b1e779b0bc2209352d6055ded3eeec3d6b7744660ec9a94d0","sha512":"4c1ec1b790c63e253be44ddd0bfd3cebc3690b71ad4252357c4ffa5b076af2a3b742ae5bd909f740be3d90cddc09ce043c19cb97f87e6246125f5c020b9bd3dc","ssdeep":"192:O8YstKJV5Qj2sDrYXxNup+PmkCQYH1ymswSoKBktkH/zaG4MVTF9UzqTVC/XjMNc:2JLGEY/xylgqktq/z9d/o/XVNXv","tlshash":"75a273d62f305274b927e760b6879799f358a1024809e6bc6ee9001ccdca3fe516fb4d","first_seen":"2026-09-23T19:32:55.663957Z","last_seen":"2026-09-23T20:26:29.230169Z","times_seen":2,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surprisedeal.shop/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surprisedeal.shop/","date":"2026-09-23T20:25:59.854Z","timestamp":1790195159854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surprisedeal.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 16:56:37 GMT","end":"Sat, 12 Dec 2026 17:54:22 GMT"},"fingerprint":{"sha1":"8D:6E:29:53:CF:02:89:43:EA:49:64:9F:8E:97:63:FF:E2:74:76:EF","sha256":"39:42:0C:60:FD:3F:8E:75:AD:61:D7:6B:06:CD:DF:9D:C5:3F:06:2D:FC:73:49:6F:04:0C:4F:60:BB:1C:5B:52"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: surprisedeal.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://surprisedeal.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 25 Sep 2026 20:25:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEqpzQlyOzUHJM6oak7wq46hqJnt7QbsZ8k5UqdJU8zuAmhfFSf5EcjkydTA%2FZXHdhPrZha%2FGXZMTvvfOawOVkNG44XiKI5Jgk8usAs3MSbe2rkPrbcgwu1cT7zPbswQMuVIjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 23 Sep 2026 20:25:59 GMT\r\nserver: cloudflare\r\ncf-ray: a3fc4825189a32fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T12:42:36.841965Z","times_seen":451493,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surprisedeal.shop/script.js","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surprisedeal.shop/","date":"2026-09-23T20:25:59.855Z","timestamp":1790195159855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surprisedeal.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 16:56:37 GMT","end":"Sat, 12 Dec 2026 17:54:22 GMT"},"fingerprint":{"sha1":"8D:6E:29:53:CF:02:89:43:EA:49:64:9F:8E:97:63:FF:E2:74:76:EF","sha256":"39:42:0C:60:FD:3F:8E:75:AD:61:D7:6B:06:CD:DF:9D:C5:3F:06:2D:FC:73:49:6F:04:0C:4F:60:BB:1C:5B:52"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: surprisedeal.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://surprisedeal.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 20:26:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Jul 2026 09:39:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6c6d66-2348\"\r\nexpires: Thu, 24 Sep 2026 08:25:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDf1GHZnLGUqMn5GLy2SZZG8iiZCdNwEfGhxej3LyReQSrUySXOP%2FsaEykPuyz2GjLzdvEeAdwjzkX61zgiiyee1HKj%2BoJ2TghZYMyON%2FMtmACys9KPw8LM4X3OYtx3tJyKYPQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3fc4825189e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9032,"size_decoded":3698,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d50c7bac68f59148f22afe7b01b171db","sha1":"3b51f27540315164c3308c475d99e10ad6aa1503","sha256":"4f63c265dc7b063c302dee4208cb1c074dd7fc4026bf2780b9b4eee1265a480b","sha512":"dc6ed3cd763997368d06bfaf252333352da77cb22c3462bb27142093d6bc639fc98567528900f153cd6022379f4ecf8a4deb236f88435e1614d14aae6c8ffbd7","ssdeep":"192:bt95+zpIm10qgz/uAS1OA1xPd2Avemu48ccQ3DAf4wj4Gr6t2Gex7ttVKlRhvVjk:p9kOC0qSNey4Fo4erK27c6","tlshash":"8f12751f3cd324725afbf2faa79f6244f9a840031a05d9003c5c91554fb8e6a1abdad8","first_seen":"2026-09-23T19:32:55.66632Z","last_seen":"2026-09-23T20:26:29.231407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surprisedeal.shop/favicon.svg","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surprisedeal.shop/","date":"2026-09-23T20:25:59.860Z","timestamp":1790195159860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surprisedeal.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 16:56:37 GMT","end":"Sat, 12 Dec 2026 17:54:22 GMT"},"fingerprint":{"sha1":"8D:6E:29:53:CF:02:89:43:EA:49:64:9F:8E:97:63:FF:E2:74:76:EF","sha256":"39:42:0C:60:FD:3F:8E:75:AD:61:D7:6B:06:CD:DF:9D:C5:3F:06:2D:FC:73:49:6F:04:0C:4F:60:BB:1C:5B:52"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: surprisedeal.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://surprisedeal.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 20:26:00 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXHraDwv1UrV7HycarJ%2F%2BX%2B7Zg0mMYrF%2Fnbl6oUspo%2BFaqlPISmHk2GLLHH6UfEjVtP6nqqHo8YQFYHhCscvUwKyGwqargS9K%2FCyxp8iIVJw2ytrmyQiJK2sniVHeNHX4c%2FefA%3D%3D\"}]}\r\nlast-modified: Fri, 31 Jul 2026 09:29:54 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"6a6c6b12-1e5\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3fc482528a232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":987,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"858a29594773f470423a7e1fc69204e7","sha1":"4a6a8c9e02b4abb2f3c8833bb29d9645ff9ef32e","sha256":"87e5a8647a803a69f423d3beb3e110a60aee368642e57c97135be0056af8bb3e","sha512":"cac21450c73407fca9db2d46a7e1d3bad4266d7373c49328491d03a8d63dd6c6c6f04bde896a868268c7dddd807b3331310e65fdfb458adac116ccd3607d822c","ssdeep":"","tlshash":"d4f02768f28c904aca00562d9b28a6e9315fa0ddc7980119f5d03f18db28dd3ad3668c","first_seen":"2026-09-23T19:32:55.667741Z","last_seen":"2026-09-23T20:26:29.232075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surprisedeal.shop/favicon.svg","fqdn":"surprisedeal.shop","domain":"surprisedeal.shop","tld":"shop"},"ip":{"addr":"172.67.180.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surprisedeal.shop/","date":"2026-09-23T20:26:00.198Z","timestamp":1790195160198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surprisedeal.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 16:56:37 GMT","end":"Sat, 12 Dec 2026 17:54:22 GMT"},"fingerprint":{"sha1":"8D:6E:29:53:CF:02:89:43:EA:49:64:9F:8E:97:63:FF:E2:74:76:EF","sha256":"39:42:0C:60:FD:3F:8E:75:AD:61:D7:6B:06:CD:DF:9D:C5:3F:06:2D:FC:73:49:6F:04:0C:4F:60:BB:1C:5B:52"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: surprisedeal.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://surprisedeal.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 20:26:00 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDsxS0Bxqbw6z1ga3rH72S7tvOs9EgB6UlIqVzCY9eef6nvIDTSfCbh84UlUfuS8zcWUGZ%2FLoxPdgX5rwcUK0HRNZ9o8Q98nOCrIg%2Be%2FtnX9WyGe7otzd92ZknOFumT%2FZaC2dg%3D%3D\"}]}\r\nlast-modified: Fri, 31 Jul 2026 09:29:54 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"6a6c6b12-1e5\"\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3fc4827396f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":485,"size_decoded":993,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"858a29594773f470423a7e1fc69204e7","sha1":"4a6a8c9e02b4abb2f3c8833bb29d9645ff9ef32e","sha256":"87e5a8647a803a69f423d3beb3e110a60aee368642e57c97135be0056af8bb3e","sha512":"cac21450c73407fca9db2d46a7e1d3bad4266d7373c49328491d03a8d63dd6c6c6f04bde896a868268c7dddd807b3331310e65fdfb458adac116ccd3607d822c","ssdeep":"","tlshash":"d4f02768f28c904aca00562d9b28a6e9315fa0ddc7980119f5d03f18db28dd3ad3668c","first_seen":"2026-09-23T19:32:55.667741Z","last_seen":"2026-09-23T20:26:29.232075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"surprisedeal.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}