{"report_id":"dda49e43-1aa7-4acc-a73b-524e33593be5","version":6,"status":"done","tags":[],"date":"2026-02-07T07:10:38Z","url":{"schema":"https","addr":"miner26.top/","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"miner26.top/","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"title":"MINER26 - Cloud Miner","dom":{"size":1782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"07fa5566583e20c44d4bad77a23e63de","sha1":"4818c0791abe4f3200f8b0167eff755c23c684bd","sha256":"0312f6a4ac9765587f39e2e1da92f51764afe80227e87f88f86fe456d1c1d881","sha512":"536cc06335bf7edd796486742c73617d6d69f43a74fea5954a100fa05a32b422dfc2a7399be739b8850e03aca8bcfc8342da0d4d2a4187610652d7f0caad23bc","ssdeep":"","tlshash":"6031955500f201a7589370c06e710b566fd4e703da1f8e1a7abd4aceaf86d8ecc5b628","dom_hash":"domhash47091fa28f8888ec925a4a4c6f99002b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"miner26.top/","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-14T07:10:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"miner26.top","ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-12-31","domain_rank":0,"first_seen":"2026-02-07T07:03:00.478215Z","last_seen":"2026-02-07T07:03:00.478215Z","alert_count":39,"request_count":13,"received_data":59176,"sent_data":7561,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":2,"received_data":258580,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":9961,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"popcash.top","ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-07T07:03:00.476572Z","last_seen":"2026-02-07T07:03:00.476572Z","alert_count":0,"request_count":1,"received_data":4908,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"bitcotasks.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-06","domain_rank":172248,"first_seen":"2022-02-07T08:06:43Z","last_seen":"2026-02-07T07:03:02.208007Z","alert_count":0,"request_count":2,"received_data":4047,"sent_data":889,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"gcoinlive.top","ip":{"addr":"64.20.45.186","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2025-10-28","domain_rank":0,"first_seen":"2026-02-07T07:03:00.479564Z","last_seen":"2026-02-07T07:03:00.479564Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-01T22:20:39.584991Z","alert_count":0,"request_count":1,"received_data":441559,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":4,"received_data":181044,"sent_data":2189,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"popcash.top/assets/js/popad.min.js?pub=1f64e485c90e\u0026f=300\u0026t=1","fqdn":"popcash.top","domain":"popcash.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"765ec71f832269a93cca293995635025","sha1":"948f21cff774ffe1635a8b32a79e0388aa30efaf","sha256":"52895374f663cdc0c01721981a968376a0b9dc351c9d3cbd01ff88d8c8169f8d","sha512":"9091df763201ec8e2f91d3542f02624bcde7e0223bdb66534203d29e49015d0883585348f4d73640eddb2cfc851aae8abc9bdacdaa49a41dedd9ad970253e9fb","ssdeep":"48:Wd3h4kXtzXWBdKRwQ5RCFUSmbVKQd3h4kXtzXWBdKRBRCF0JQmSqfrck9D4Y5ZMY:1kBmBdKwFhmxOkBmBdKUFIH4Y5ZMJmxT","tlshash":"61911dbb0126302149f252e96f57660ef376a06b3156c3097a5e43492fbad0bc372ddc","size":4471,"data":"","first_seen":"2026-02-07T07:03:06.083581Z","last_seen":"2026-02-07T07:10:40.255179Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitcotasks.com/popad.min.js?pub=MTA3Nzc=\u0026f=3\u0026t=5","fqdn":"bitcotasks.com","domain":"bitcotasks.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7a30a77e67e5fb7b8e79a841fd9674f","sha1":"f9749ecf7bfbdc0d9476005ecdddb62d5219415e","sha256":"df57d06a6dc39c4b87be0ec4e160bf957d07fc00685343584931563848413486","sha512":"d58d252fb1fa610fe152b023f0a169971cf01da733fd1c0d66a1d53cc305194b3e2f4185a4743b1e82cde58965142554dc372b1ebd938f1abd57b29e7793ab7c","ssdeep":"","tlshash":"cc3174ba3246e51062f440dd9cb9f719f0634a08ec6ac845b65e0d407f0aa0feaf1fa4","size":1742,"data":"","first_seen":"2026-02-07T07:03:06.060119Z","last_seen":"2026-02-07T07:10:40.208245Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"acd68840fe4a1d0b1ab7e1d7f4ed7c23","sha1":"460fbd17b918ff52bfdebbc5411ddafb88844dc0","sha256":"1686a149b05ad079e3855139d9670388de7a32794ab9650da93fa0099ac04b54","sha512":"2a3b2bb3ec05bdf5516f40e0a4e1d756eb05b13d31d5d0c1cd4c0092dabf9d2aa17d4037f3873e6f7ab96c07e39ae8f0713406df4878ac49d3e34736aa8be953","ssdeep":"","tlshash":"46c02bcc210a1cb042fb37008f3fb700f0423218b4d07d31484923449e30e13ef54850","size":153,"data":"","first_seen":"2026-02-07T07:03:06.097084Z","last_seen":"2026-02-07T07:10:40.256388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38b6db17987418289c786a99c883e5b8","sha1":"df92adbfb7e322373956d2266aa5ed1e5ef59bdf","sha256":"ca51379a6cdde78015558cffc7799af3447510f4a1e0139f689feab34376efbe","sha512":"5d5e6c0ef3aed066579515f16dda030da01bf385875e95b0a536d540073c51001393cd8c08c9885535d6c09adb60da64c9fa123b233cf15f27c1e4c330485ad9","ssdeep":"","tlshash":"a641149478b79816423320755bdfa25673bfa2273409ea013f2e8b045f44b1967777dc","size":2176,"data":"","first_seen":"2026-02-07T07:03:06.098849Z","last_seen":"2026-02-07T07:10:40.257168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QP5RM34BEQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"504ef06e26996a9afd39d8c6b74296cd","sha1":"1f5f1decb74925b81ad47228f45dadcb6e671902","sha256":"557febf22e809e692fce9811d554cdd8e278e734914e7b1a55e8f80775936253","sha512":"0a2fd8320076bd85a24848288f2671b60888b1770432fe07a7b0441337d5725a6ee96dd6b8a0876db19c2d93b8f35f8f09a19f76b2bdac5e3a707f8ca0255fe7","ssdeep":"6144:tIbh3hDGzzfR681qbOqR51/48BjM3cp81Qj3AEFytI10KTB:6bh3hDkz56nbD/48BzFy4B","tlshash":"859409de73c674225396f478502f018ba57b28a2f48cc89af189cce42d74a9a4177f7d","size":440955,"data":"","first_seen":"2026-02-07T07:03:06.063848Z","last_seen":"2026-02-07T07:10:40.210969Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bitcotasks.com/popad.min.js?pub=MTA3Nzc=\u0026f=3\u0026t=5","fqdn":"bitcotasks.com","domain":"bitcotasks.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcotasks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 23:12:05 GMT","end":"Sun, 22 Mar 2026 00:09:52 GMT"},"fingerprint":{"sha1":"29:43:D5:38:9A:68:10:ED:E0:D2:58:83:37:3D:70:7B:25:6B:35:67","sha256":"5D:87:E5:0C:C3:B4:46:49:30:ED:95:12:C9:D3:4D:A6:18:98:D8:09:B4:48:6A:26:59:4E:80:76:08:02:6B:CF"}}},"request":{"raw":"GET /popad.min.js?pub=MTA3Nzc=\u0026f=3\u0026t=5 HTTP/1.1\r\nHost: bitcotasks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0, private, no-cache, no-store, proxy-revalidate, no-transform\r\npragma: no-cache, no-cache\r\nexpires: 0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Model\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,User-Agent\r\naccess-control-allow-headers: Content-Type, Authorization\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ul8hBc88eUFlSFOamczxDjuJlkBf0iW9PaaLl4c4rTWuHZbuTjtdofkLogRSv2kxAnHS1ZOlrVmpglrWGHeylzX03dRyDZdutR4N5CjS\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nstrict-transport-security: max-age=0; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9ca110fb48430883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1742,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (925)","md5":"b7a30a77e67e5fb7b8e79a841fd9674f","sha1":"f9749ecf7bfbdc0d9476005ecdddb62d5219415e","sha256":"df57d06a6dc39c4b87be0ec4e160bf957d07fc00685343584931563848413486","sha512":"d58d252fb1fa610fe152b023f0a169971cf01da733fd1c0d66a1d53cc305194b3e2f4185a4743b1e82cde58965142554dc372b1ebd938f1abd57b29e7793ab7c","ssdeep":"","tlshash":"cc3174ba3246e51062f440dd9cb9f719f0634a08ec6ac845b65e0d407f0aa0feaf1fa4","first_seen":"2026-02-07T07:03:06.060119Z","last_seen":"2026-02-07T07:10:40.208245Z","times_seen":3,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":20,"dns":4,"connect":1,"send":0,"wait":94,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gcoinlive.top/b_300x250.png","fqdn":"gcoinlive.top","domain":"gcoinlive.top","tld":"top"},"ip":{"addr":"64.20.45.186","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcoinlive.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Dec 2025 08:52:52 GMT","end":"Thu, 12 Mar 2026 08:52:51 GMT"},"fingerprint":{"sha1":"29:BD:02:80:7B:C2:7C:30:B8:94:75:60:5A:76:5E:E2:A8:38:94:F3","sha256":"8B:E1:2C:8C:B6:8C:52:41:07:36:FA:AB:81:3C:F6:BF:BD:D6:89:B2:5D:9E:06:AC:29:9C:37:15:2A:E3:CB:B8"}}},"request":{"raw":"GET /b_300x250.png HTTP/1.1\r\nHost: gcoinlive.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: PHPSESSID=351b50f9db682cec9e44681ee6e9e31f; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":186,"dns":1,"connect":92,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-QP5RM34BEQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-QP5RM34BEQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nexpires: Sat, 07 Feb 2026 07:10:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145931\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440955,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"504ef06e26996a9afd39d8c6b74296cd","sha1":"1f5f1decb74925b81ad47228f45dadcb6e671902","sha256":"557febf22e809e692fce9811d554cdd8e278e734914e7b1a55e8f80775936253","sha512":"0a2fd8320076bd85a24848288f2671b60888b1770432fe07a7b0441337d5725a6ee96dd6b8a0876db19c2d93b8f35f8f09a19f76b2bdac5e3a707f8ca0255fe7","ssdeep":"6144:tIbh3hDGzzfR681qbOqR51/48BjM3cp81Qj3AEFytI10KTB:6bh3hDkz56nbD/48BzFy4B","tlshash":"859409de73c674225396f478502f018ba57b28a2f48cc89af189cce42d74a9a4177f7d","first_seen":"2026-02-07T07:03:06.063848Z","last_seen":"2026-02-07T07:10:40.210969Z","times_seen":2,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":142,"dns":1,"connect":21,"send":0,"wait":37,"receive":61,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://miner26.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575186\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T22:13:01.405018Z","times_seen":205261,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":83,"dns":1,"connect":10,"send":0,"wait":18,"receive":6,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.1.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://miner26.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 154840\r\ncf-ray: 9ca110fddc2849c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"62deef96-25cd8\"\r\nlast-modified: Mon, 25 Jul 2022 19:31:34 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1405917\r\nexpires: Thu, 28 Jan 2027 07:10:14 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=agi4lOYt3oKG19D7SIJpXBTOHEhTnK3hIgWYHdO0YURI87aFOl2lzMB3afhPVR9i%2FjKFgwF1nrYFaJ8BbcCu7QFnAKL4Lrc2d6iFE%2BwftikscwqMMpT0uw0Ya7t2rCGx9NRdWOp1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154840,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 154840, version 769.1280","md5":"be4dccbe54eea47a0ad5d7bb60a3c17d","sha1":"1979128e8ba1517d85f5e4ee505abf486c51557c","sha256":"52bbd916956b4ed8b9d71d1784e4008b207814ec506203326fb36052f3451adb","sha512":"7f7b2964cbeca667d4c26a208be85ab5cb77bb0817318fa3b9045643475ad50b0686427f71588ce52f340df9d030a979b12282da36d9cecd02e86962ff21741f","ssdeep":"3072:cHotp2dhjcnP3MuYoRmQPg7mjPrqsA1qHO32raWB8nxDEUNnP2OcsJpJE:3p2d2nkuvzY8pW1EUNP1csJ4","tlshash":"6fe312d40dbb45e0fa24d204633a4e0e0017bdedde6169b9cf34fb8c9314798ea5ba25","first_seen":"2023-04-05T04:43:09Z","last_seen":"2026-06-06T16:54:40.465058Z","times_seen":2397,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":25,"dns":1,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/trx.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/trx.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8905\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8905,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"760fdf0a351bbb976fd3b221ae05f490","sha1":"0cea9dd9c3ff3e9102734cd6654f9ff861175419","sha256":"3fc65a19cf0539cf6ed188ab05e5193111a8041ba712952d2b0fe4b628b38523","sha512":"4ef50c8618a00235d241362cfc376d7b8aa2200ca0a7d05e4d5cb3077b148c329cdce0ebaea2f86ca85a57313de0e6ddded60cefd2c01c835e6ac3c33fadaf64","ssdeep":"192:IzaQFWosyGW/St1AFbTSzaKLLv1rzLB+2F3SNWsgH2Xeb25E5CY1:Iza81WIKLvlt+2F3SkrWOblv1","tlshash":"f8028ec924c8b103f37e4764c905617c63d95e663922fdfb62b15d7b6181089897a362","first_seen":"2023-04-22T11:10:24Z","last_seen":"2026-05-13T13:15:04.454152Z","times_seen":71,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/xrp.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/xrp.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2330\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-06-06T18:41:46.426094Z","times_seen":16159,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/s_coins.php","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /s_coins.php HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 411\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2052,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"958143747c894f2bf808aaf91072e2fc","sha1":"ad90533729eda7f193494d1fadae96746f5f4fd4","sha256":"ca3e5a65627a5a728291ffb7a6472ab90d7c257d56adc56d0ad2629bf6f0ba70","sha512":"c5f2962f5b806fc4743ceaab2c329941e484bdc1dee5def6476b2b37a0525be1c599d0d72ee8b1a411d8bd6ba6451fe45c298b77b529df8b95d6b726d6d9aefa","ssdeep":"","tlshash":"11418d2000c64516147371d0ee610a99fed4a303d71b866a7afc6bcb6fb3d1bcd5ba25","first_seen":"2026-02-07T07:03:06.067763Z","last_seen":"2026-02-07T07:10:40.219569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://miner26.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 21:15:08 GMT\r\nexpires: Tue, 02 Feb 2027 21:15:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 381306\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-06-06T21:18:00.37814Z","times_seen":20215,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":86,"dns":1,"connect":14,"send":0,"wait":26,"receive":2,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://miner26.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575186\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T22:13:01.405018Z","times_seen":205261,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":83,"dns":1,"connect":14,"send":0,"wait":22,"receive":3,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/btc.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/btc.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1662\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"52dca8c5fde392ec45154394c8260947","sha1":"16b9c6adc08e037e59390192d68044cee9fee523","sha256":"8d121e4e96fd139a877c8b053638644f2c571a131105a47a635cb4c14ab7a530","sha512":"e44c2d777657a6cc208654db85cb147c0e48046b65a012af1c58aeaebc5c5ec7011a0f65a8a0ec3062d6260cc04ccadc9b29dea2bcb190983af93562a8b96e59","ssdeep":"","tlshash":"13310ad73a44c5b4d48b43f18704e229e42b5f6e470f2a81d3c3ce64ed8648e134da6d","first_seen":"2025-06-19T18:09:19.868073Z","last_seen":"2026-04-19T01:10:46.741251Z","times_seen":7,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/usdc.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/usdc.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 892\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"25bcb059251caa734d596e764838b1aa","sha1":"66e6753403b44dd24721b823817e3029ae14a7c0","sha256":"1bd5b35db23cfbeaee8ec3ae974e46291f9bc6ff08cd717a5713e92c3b9ab02b","sha512":"b6d0efaf80771943be04e0df2293f51d8bd95c4ff8c076236b260caf580a26f8e6948b9c45becadb273cb28690ba92bc130330c2bd9ef7509a96446a33f87c8e","ssdeep":"","tlshash":"361167dc9a5da73cf7547a1bc9126ba8829985b2ce2ef74c10406f39a120eb46085669","first_seen":"2023-05-08T13:54:02Z","last_seen":"2026-06-05T14:59:54.191091Z","times_seen":261,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/pol.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/pol.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1812\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"4a5cf3bf4aff9498a005a0db207a5357","sha1":"187000c658c2e9407e4f28d77bb181a0957855df","sha256":"379cf133f088d2130d617a89f2752594f8f015ba9b9f1c6fce69422e7db3602d","sha512":"f08c5ff4121649931a5563beb401e22695f3d97bf8ceec9a958edfa9939a022a0f875ed6e9e479d693e3b0bbaeb28109aaadea2bf004256b2dfc3821f32c3509","ssdeep":"","tlshash":"003194befa08a529c351533a34975dd67d894ce96760e3041b2bf2745bf1169c0c6711","first_seen":"2023-11-05T21:53:50Z","last_seen":"2026-02-07T07:10:40.228221Z","times_seen":6,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/ton.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/ton.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 899\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"44e5a2482c07cacbbf94a85b8b3ca6a5","sha1":"5185e12771d8879da8e4b558703ae307f79ed2cc","sha256":"997b81310c8a2d62190191a8e268b5cbb7cd0ce170438c5bfd2271c216d5080e","sha512":"2c57a7355f621ef0ad32e02a5693320c86462203e3bbd2cfe0b01796bbf5a5123edc912ee402883ed52dc5d43e5d5c6cbb4cc626457edf38d877abf6e64b8610","ssdeep":"","tlshash":"21119657c9810c14f50338710a551e2cd47b67451afed5ddeccd8eb001506d5d1720a6","first_seen":"2025-06-28T22:55:16.876721Z","last_seen":"2026-03-08T14:22:37.407823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/favicon.ico","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-06T21:19:18.488308Z","times_seen":132344,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;900\u0026family=Outfit:wght@400;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;900\u0026family=Outfit:wght@400;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Feb 2026 07:10:14 GMT\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9275,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"295226e1fc5afc4be07bf8df2cc828c8","sha1":"a289dc788af72fdae5a0bbf31d79cc4e9729b41d","sha256":"84a9175b74a741a44f6e84a2b7de7c4425c4a781a52727109405e1560d7d2b66","sha512":"55f35c3bc2dabdfd1c2f8d70d4e574ce70454e249d287c48dafbc55d45ca2a9feef349f8213ffbb4965e6b6b0a542fec456b98633229a664f4de8ffed522e8c3","ssdeep":"192:9NNIxO34OxDNNryfO3iExlYNCbOO3Lxxgxh6Ch1V:vXJpkQa","tlshash":"d712db92002ba400ab870dc233cf7f3aae8e51846085d1796ffd0cc9aceed66436975d","first_seen":"2026-02-07T07:03:06.056453Z","last_seen":"2026-02-07T07:10:40.241282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":146,"dns":1,"connect":20,"send":0,"wait":34,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.1.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.1.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 17188\r\ncf-ray: 9ca110fb3c66b4f9-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62deef96-4324\"\r\nlast-modified: Mon, 25 Jul 2022 19:31:34 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1912535\r\nexpires: Thu, 28 Jan 2027 07:10:14 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=58BIQjUvj3S3JmFy9AQhKeZJsVYU1CFkNJpXYDo%2Fwf1L4izE%2BGSCzUgRQ81m9zPXcV4bkHtJiUmvJIAyTTBcU8fvUCPhVCHq7n9LCPhtHmo9VPyn%2BOccGfsc%2F%2F7rwjzAbhDZDdmp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101709,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"8ef777107c4620d4ddd4f8c4bb14a36c","sha1":"0ae47fa834fb55de7b50c79021aeabecfae50c9c","sha256":"c5e8e8eb22e2eaf1ad02370c22c63c04774ab0b83b4329d5945333750814bb2f","sha512":"d6c0913dd9115e1055d8f04b51d45be2d320d70d983dfdfba9ab5415e4bbce5072ee3248f0b7f8547c167d965fa57b5848bcbce69926f4669855831fc39042d4","ssdeep":"1536:RUMVM6MVMkMVM9MVMNMVMispLZdz+WnQcnlFwLb3esoUde7cQ:oZdzRQcnlFkesoUY7cQ","tlshash":"99a3b7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-05T04:43:09Z","last_seen":"2026-06-06T21:58:14.416241Z","times_seen":4546,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":15,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/usdt.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/usdt.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1479\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"34ecd2996838025e0290d3480866da85","sha1":"9a83180ac656ad090cbaeb04e590fbfbce8e809e","sha256":"a0e1d9f6243de01908f4c0223dd313983a60613e4f4773e1f12e10df56698e60","sha512":"5b4affcd9b841cdbb13e76c0dced67487dd4a266871e943ab10024fb7213c731a84c32198e27daa889df87e65c96c6348c74f760655207ede7f2f48325b5010c","ssdeep":"","tlshash":"9431c7af3340d61b1b7e059bd922c4bc88238296487199a7eb55e2b4bc6010bfe6c02d","first_seen":"2026-02-07T07:03:06.08668Z","last_seen":"2026-04-19T01:10:46.720972Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/zec.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/zec.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2424\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2f7f439543524c24f6631dc79fff2534","sha1":"fe636b1346a355d4d2a860eab78ed63151a1d105","sha256":"047acc3f1c7ca410bb750b6c23980bc8f9d827c50ff7903d6fbfe2a8828cdccb","sha512":"39928410f8a01eb59e165fdffebe13aa0f451ad6a5e4058e4e93782470b1a34b95badd6e1ec467f9cf6bb4d4138e086b9b80569b0c7ce6d528b6c068eb434996","ssdeep":"","tlshash":"8b410af2968c157ee44825b969f2fd33f9f2a5e444c4e4431b4bc19a228d10d3e3e86c","first_seen":"2023-05-25T22:55:54Z","last_seen":"2026-06-06T13:45:19.126639Z","times_seen":266,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-07T07:10:13.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":27804,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"be36c4b0134b255cc626bafe8cc54d8e","sha1":"0aeac11e230b62d4c1e55128d47db16ea94c97b9","sha256":"9218ede0a1fc885352b6de4687907e411484d96bf5fee366cf47925d771cefda","sha512":"4387c0aac170470d13996a01cb2f16859091af60483da16ce4318190853db3048a4b45f814975a112dcb1820708c8b4ae4f784090cbb6e8213176fdf6e4be785","ssdeep":"768:Fp57VKhPqY2rMsGcSxGhcYAaVM/9yPCh7bkVdl:hG2ybHYAaVL5","tlshash":"62c2612b65f311126493a4b53ff757867b24e107c40aca683fad0388dfca9909d63b4e","first_seen":"2026-02-07T07:03:06.095265Z","last_seen":"2026-02-07T07:10:40.250854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":187,"dns":1,"connect":92,"send":0,"wait":98,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://miner26.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575186\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T22:13:01.405018Z","times_seen":205261,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":90,"dns":1,"connect":9,"send":0,"wait":8,"receive":11,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/doge.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/doge.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2354\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"1c0dbc9412fd64e2a0c631969e384c99","sha1":"341ad430825a2c36d8d88bbe42c110f370f99053","sha256":"5d2a64b434eabcbef8488f4e4d702bbb68b555f2370928decfa59db7bca0d327","sha512":"440624a8c0bb4e31b6d17165ef6c9208a07a7344e5576ab264b5050c3ee03dc8da8a7aca4a979ea707417949c61c075b5d9d58a306e516b7875d28c8d943ea06","ssdeep":"","tlshash":"68414da93646f8fe5a20c764db404b29a874b3e8f054c5cc04f263a4b634b1d847c107","first_seen":"2026-02-07T07:03:06.071848Z","last_seen":"2026-04-19T01:10:46.723572Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miner26.top/assets/img/ltc.png","fqdn":"miner26.top","domain":"miner26.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://miner26.top/s_coins.php","date":"2026-02-07T07:10:14.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"miner26.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 14:33:15 GMT","end":"Sun, 19 Apr 2026 14:33:14 GMT"},"fingerprint":{"sha1":"73:25:B5:45:56:4D:5A:6E:E8:4B:F4:F3:B5:C5:26:22:01:A2:47:32","sha256":"E6:D0:A5:53:12:24:DB:A2:26:E4:B2:B8:19:1E:60:03:70:83:44:F3:B9:49:BC:37:7F:71:B8:54:3E:68:FD:DD"}}},"request":{"raw":"GET /assets/img/ltc.png HTTP/1.1\r\nHost: miner26.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/s_coins.php\r\nCookie: PHPSESSID=b3ef4a45c88d3c37ceb1e0016354a802; _ga_QP5RM34BEQ=GS2.1.s1770448214$o1$g0$t1770448214$j60$l0$h0; _ga=GA1.1.500047871.1770448215\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Feb 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 05 Sep 2025 14:08:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1532\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"fb1424e0d6971a81e3a533d5443f3f29","sha1":"6dc2679054102db61b3e73c60d0e54757eccafa2","sha256":"d698819ebd2581a44e3cf26c4044f3b8d0fca69f4daccc1523b35fe9b1f5dd6f","sha512":"808002cff2c01ab99dad447ca8ee383d92bc4ef67f8f224e9015e089607e47a4afc0a375d596645daf0149b6184df3c61554fff434007b4cdb2f88600b2340f2","ssdeep":"","tlshash":"7d31c9b2f912aa3ed154393bfc45b065d4a2f32e15abe7420d0217fe562e1cceb42904","first_seen":"2026-02-07T07:03:06.076734Z","last_seen":"2026-04-19T01:10:46.738254Z","times_seen":3,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-07","alert":"Sinkholed","trigger":"miner26.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bitcotasks.com/popads.php?ads=1\u0026pubdata=MTA3Nzc=","fqdn":"bitcotasks.com","domain":"bitcotasks.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:15.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitcotasks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 23:12:05 GMT","end":"Sun, 22 Mar 2026 00:09:52 GMT"},"fingerprint":{"sha1":"29:43:D5:38:9A:68:10:ED:E0:D2:58:83:37:3D:70:7B:25:6B:35:67","sha256":"5D:87:E5:0C:C3:B4:46:49:30:ED:95:12:C9:D3:4D:A6:18:98:D8:09:B4:48:6A:26:59:4E:80:76:08:02:6B:CF"}}},"request":{"raw":"GET /popads.php?ads=1\u0026pubdata=MTA3Nzc= HTTP/1.1\r\nHost: bitcotasks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://miner26.top/\r\nOrigin: https://miner26.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Feb 2026 07:10:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, private, no-cache, no-store, proxy-revalidate, no-transform\r\npragma: no-cache, no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,User-Agent\r\nset-cookie: PHPSESSID=ec83dab5b2b3403c35447dbcedc9d8bc; path=/; secure; SameSite=None;SameSite=None;Secure\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS, DELETE, PUT\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=0; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlLuBIbbiuW%2BPdXlUZX36f%2BPdnmUjv7xmtsos5p7kUMUD2aSXccWx0J6ru7NxikvGJ1cSZD%2Bc64GU3y1H6O0sYuyU3aUYvgBxTzEIw6h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ca11100ad1d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7bdf575729529b4db3d1de97f7c687bb","sha1":"225e53308673da40f9529385ede7724a897e45ee","sha256":"ec94f0dc80b2e34f36a0e3315d42d6f86ad5728bf57945cdff0c4ddac572c04b","sha512":"da77520513d1443feca0f80a67d6d491d57fe4326aea5f390d7a1262e1205472a0e0b137dbd15f7133872dce710328030a4f5e3ad9e91efbe8c78fa8a0678d32","ssdeep":"","tlshash":"7760003330f0303000fc03c00c003000c00000000c0000c000c030c00030003f000333","first_seen":"2025-09-01T04:55:37.956951Z","last_seen":"2026-06-06T04:29:00.85843Z","times_seen":10,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":31,"dns":1,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popcash.top/assets/js/popad.min.js?pub=1f64e485c90e\u0026f=300\u0026t=1","fqdn":"popcash.top","domain":"popcash.top","tld":"top"},"ip":{"addr":"174.138.181.182","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://miner26.top/","date":"2026-02-07T07:10:14.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popcash.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 07:13:33 GMT","end":"Thu, 07 May 2026 07:13:32 GMT"},"fingerprint":{"sha1":"58:18:A3:64:74:72:AA:6B:D4:6D:8F:FD:C1:56:7F:CA:B5:F6:3F:08","sha256":"EF:B2:7D:7E:EF:BE:07:2D:8A:A0:4E:B5:A6:29:FD:E6:4A:1C:57:B6:31:46:CF:59:31:EA:FA:83:D6:B2:85:1A"}}},"request":{"raw":"GET /assets/js/popad.min.js?pub=1f64e485c90e\u0026f=300\u0026t=1 HTTP/1.1\r\nHost: popcash.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://miner26.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 06 Feb 2026 12:06:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1076\r\ndate: Sat, 07 Feb 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4471,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"765ec71f832269a93cca293995635025","sha1":"948f21cff774ffe1635a8b32a79e0388aa30efaf","sha256":"52895374f663cdc0c01721981a968376a0b9dc351c9d3cbd01ff88d8c8169f8d","sha512":"9091df763201ec8e2f91d3542f02624bcde7e0223bdb66534203d29e49015d0883585348f4d73640eddb2cfc851aae8abc9bdacdaa49a41dedd9ad970253e9fb","ssdeep":"48:Wd3h4kXtzXWBdKRwQ5RCFUSmbVKQd3h4kXtzXWBdKRBRCF0JQmSqfrck9D4Y5ZMY:1kBmBdKwFhmxOkBmBdKUFIH4Y5ZMJmxT","tlshash":"61911dbb0126302149f252e96f57660ef376a06b3156c3097a5e43492fbad0bc372ddc","first_seen":"2026-02-07T07:03:06.083581Z","last_seen":"2026-02-07T07:10:40.255179Z","times_seen":2,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":189,"dns":0,"connect":92,"send":0,"wait":93,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}