{"report_id":"e1aa831b-e5ab-4966-8dcf-926072f3fed6","version":6,"status":"done","tags":[],"date":"2026-01-17T04:52:36Z","url":{"schema":"http","addr":"hana-network.cc/","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"172.67.220.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hana-network.cc/","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"title":"Hana Network Quest - Earn $HANA Airdrop Rewards","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hana-network.cc/","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"172.67.220.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-21T04:52:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"hana-network.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hana-network.cc","ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-19","domain_rank":0,"first_seen":"2025-08-08T12:27:46.056014Z","last_seen":"2025-11-13T18:22:56.653151Z","alert_count":4,"request_count":4,"received_data":6366811,"sent_data":1765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-11T22:30:04.050705Z","alert_count":0,"request_count":1,"received_data":2934800,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-11T22:24:29.090978Z","alert_count":0,"request_count":1,"received_data":60313,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hana-network.cc/88658809-694b-4e63-b31f-ab81868e57f5","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-07-24T09:03:46.044339Z","times_seen":5088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/b60c7cf0-34f0-4b7c-a14d-866abea9b6e4","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/vusxe4fvoh.php","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd5e01f76e94b82cd2fa36bb86befc97","sha1":"130fb8841a18c1f8d20aef9a2db036faf728a4d5","sha256":"a621708e0df7e4c4cb3a4123e630e502ccf9c55e95b7a213b97f943e85fdcc7c","sha512":"355eac4fcb6c6fab3dee14aee28c159ffbc22298b257076cc0ad684ce5e6e564517a09b972fff347d1643f1fbeafc858ee94fcf1ffb9a3da1bed56dcbe44027a","ssdeep":"1536:LyLYhIR6yuPWcxlkJfTPzcB0REhY6CyqVoYXsQrZV6J:LyLYw6yuPbxlmfDFTyqVo46J","tlshash":"1dc3bd9a1d4294948f4967efc4f3a489d1108e628dadb06bd92edcd0763cfb284c716f","size":124217,"data":"","first_seen":"2026-01-17T04:52:39.342856Z","last_seen":"2026-01-17T04:52:39.342856Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcec706006ba66a5ec1619541778096d","sha1":"9e0e8ed33fd31ed6660f534a81d39e436b50194c","sha256":"826b0d5e39c32857fab64746e4fac117eb7d29f1024f634fb556d922d117072f","sha512":"f2fad2a6f0d7dae8ef7e86c105e285dc68ad34da57587c56022127fbcf1db5e004aad9fd4883ed4ca5e527c6bd167b9a9377b6a063dd5f8b231ad7666f6616fc","ssdeep":"","tlshash":"cf01f42db175a0b06a3b3139870f6a48603214573109e55479afcba54f7425e92a2fdf","size":730,"data":"","first_seen":"2025-08-23T15:43:39.438663Z","last_seen":"2026-06-02T08:20:56.54547Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tailwindcss@2.2.19/dist/tailwind.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hana-network.cc/","date":"2026-01-17T04:52:12.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/tailwindcss@2.2.19/dist/tailwind.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hana-network.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.2.19\r\nx-jsd-version-type: version\r\netag: W/\"2cc503-cyTPK4s7rX9aC3Y3NNaHIxjV1fQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 17 Jan 2026 04:52:12 GMT\r\nage: 2078299\r\nx-served-by: cache-fra-etou8220049-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 255702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2934019,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fd1515a3d70a9d3d1efe23553fb559ab","sha1":"56977de783ee69a0dbd14635c5a34fa3946b2252","sha256":"9209ca41f0f277ebe6b6e87354dc667081a638b83945f4531807bf06046227c7","sha512":"d3f9747c4e662b5dc6bf2e4e88b68425f82c89cc01c4a088574bcae8fa6c9896052b26355c2a1d93f4b6e8a5a4e589378f004c8d33299a0a53e0e5e63731c78b","ssdeep":"24576:TNmEvSBlsi1KhVzbweQgx+oaiM8eMkEcnxnF/DlZKmTKvxg4hahhDAeYYL24qC0s:TNmEvSBlsi1KhV6xnF/DlZKmTKvxg4hc","tlshash":"31255f3cabb1253baca7a1e9e145fdacd50762d8ed3005e7bc9221019be13f7c947264","first_seen":"2025-07-26T19:06:20.805876Z","last_seen":"2026-07-27T11:30:16.976731Z","times_seen":4442,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":54,"dns":1,"connect":26,"send":0,"wait":27,"receive":84,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hana-network.cc/","date":"2026-01-17T04:52:12.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hana-network.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 17 Jan 2026 04:52:12 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10462\r\ncf-ray: 9bf33dec196e1a30-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"613fa20b-28de\"\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 69153\r\nexpires: Thu, 07 Jan 2027 04:52:12 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lxdeCiTLvtVnR7fJlYBkVimh%2FHF2ADBZIMroW5hit9C%2BsE8%2FhLONe41r7vOMpDEos1Leqx37kYr7%2Bm2yW35IOs%2BtuEZDBozZTavmD%2F06VT375UcqYK0GtWcEjtswh4lkNIyvaGJg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-07-28T00:18:13.884882Z","times_seen":46795,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":12,"dns":1,"connect":2,"send":0,"wait":9,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/vusxe4fvoh.php","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hana-network.cc/","date":"2026-01-17T04:52:12.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hana-network.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:59:20 GMT","end":"Tue, 31 Mar 2026 21:57:55 GMT"},"fingerprint":{"sha1":"10:E8:40:DE:3E:B7:54:CE:A5:B2:C7:55:AA:7C:99:99:4A:05:A0:BF","sha256":"CF:21:99:C4:51:91:D4:28:B6:A7:C5:39:28:A7:98:36:52:A9:E4:D3:59:3A:2C:04:81:BE:96:DA:E4:04:C4:30"}}},"request":{"raw":"GET /vusxe4fvoh.php HTTP/1.1\r\nHost: hana-network.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hana-network.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 17 Jan 2026 04:52:13 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.29\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BP5%2BcmPF3bgJGAMdiHx2ID9oikNVTIU18VmvqOM5k3B5ae1ZRQtfmVdRmkYR7d4T6p285lZT6vSZpRGHJ1IzSn9%2Br1ZpHOKNvtY8sc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bf33debff7956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":124217,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bd5e01f76e94b82cd2fa36bb86befc97","sha1":"130fb8841a18c1f8d20aef9a2db036faf728a4d5","sha256":"a621708e0df7e4c4cb3a4123e630e502ccf9c55e95b7a213b97f943e85fdcc7c","sha512":"355eac4fcb6c6fab3dee14aee28c159ffbc22298b257076cc0ad684ce5e6e564517a09b972fff347d1643f1fbeafc858ee94fcf1ffb9a3da1bed56dcbe44027a","ssdeep":"1536:LyLYhIR6yuPWcxlkJfTPzcB0REhY6CyqVoYXsQrZV6J:LyLYw6yuPbxlmfDFTyqVo46J","tlshash":"1dc3bd9a1d4294948f4967efc4f3a489d1108e628dadb06bd92edcd0763cfb284c716f","first_seen":"2026-01-17T04:52:39.342856Z","last_seen":"2026-01-17T04:52:39.342856Z","times_seen":1,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"hana-network.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/favicon.ico","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hana-network.cc/","date":"2026-01-17T04:52:13.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hana-network.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:59:20 GMT","end":"Tue, 31 Mar 2026 21:57:55 GMT"},"fingerprint":{"sha1":"10:E8:40:DE:3E:B7:54:CE:A5:B2:C7:55:AA:7C:99:99:4A:05:A0:BF","sha256":"CF:21:99:C4:51:91:D4:28:B6:A7:C5:39:28:A7:98:36:52:A9:E4:D3:59:3A:2C:04:81:BE:96:DA:E4:04:C4:30"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hana-network.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hana-network.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 17 Jan 2026 04:52:13 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\nlast-modified: Mon, 07 Jul 2025 20:53:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"3aee-6395d07b04c00\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIhoczExWhKtPNB5CnnSNBqYxK5IN%2Fhf7c8ztZIOpc66arvB0%2BEB%2BRmTYjysX0pWdFzxG%2BRjf6MvDT5%2Bi2tF3SUIH4u%2B1AFmgOh1Cts%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9bf33df22fa356af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"9af88c7d35b1a2b6997154cbdca39d74","sha1":"d9916122b56ef954280f8435aca9b43715a6303a","sha256":"3159f5621f58278ebb1200597feac6e9a48ba6e6952e5364e3327f99382724ca","sha512":"5731653412efaf86382bf62be0cb175eb87058a02960e52f5ae545f5c60a61a9b1babded4541d78b04e839fa624394e35ad0540a33af250cc26c9fdf246bd32f","ssdeep":"192:KvTwDL7S0t1Bm0y0y0J+MJAEJvaJhGtJbki1zVzyAFCZlzx:Ko","tlshash":"8162764aff2ee883c8814d7e2af4e418d318bc9411b99637776ebd2ccd91588e748d84","first_seen":"2025-08-08T12:27:48.905397Z","last_seen":"2026-01-17T04:52:39.346189Z","times_seen":4,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"hana-network.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/vusxe4fvoh.php?m=2947709","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hana-network.cc/","date":"2026-01-17T04:52:13.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hana-network.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:59:20 GMT","end":"Tue, 31 Mar 2026 21:57:55 GMT"},"fingerprint":{"sha1":"10:E8:40:DE:3E:B7:54:CE:A5:B2:C7:55:AA:7C:99:99:4A:05:A0:BF","sha256":"CF:21:99:C4:51:91:D4:28:B6:A7:C5:39:28:A7:98:36:52:A9:E4:D3:59:3A:2C:04:81:BE:96:DA:E4:04:C4:30"}}},"request":{"raw":"GET /vusxe4fvoh.php?m=2947709 HTTP/1.1\r\nHost: hana-network.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hana-network.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 17 Jan 2026 04:52:15 GMT\r\ncontent-type: application/javascript\r\nx-powered-by: PHP/8.2.29\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=To7TfQSq69oUVDqc0jDgSqRlP6TuYAbjt5Ds4aHctjAHRGq1oLX8EA6ys%2BNHu2kz5Kx9xHSgg8hydirLldsvlfdUyXfVAWRlgHUvjuU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bf33df27fa456af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6216185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff2a151152ff55cc862366d73fa76b78","sha1":"293a56e579ccbc3f16508392ea8cb55adc633362","sha256":"d30568035def42549eb9349168140f1df7543a856b0be765488995489dc293a8","sha512":"a0a5f46b04be3e4c681eaa968b3dfe97cf945ec69b661a27a675c180e0bb5122ea1d3a3781deff16372e8b392d4ca8f5ebd201be355a6432d31905a26e248449","ssdeep":"24576:l6gS97ca0CW/uh8FDOKe3K5RYBCWiIG4hpGQQa:l6n97ca0lLoKOKAB/Z3QQQa","tlshash":"732512e760d6e0d27758e934d3e21dec69eb816b6ed906743504cac4209a5a9cfc8fc3","first_seen":"2026-01-17T04:52:39.349272Z","last_seen":"2026-01-17T04:52:39.349272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2037,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1498,"receive":539,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"hana-network.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hana-network.cc/","fqdn":"hana-network.cc","domain":"hana-network.cc","tld":"cc"},"ip":{"addr":"104.21.24.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-17T04:52:12.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hana-network.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 20:59:20 GMT","end":"Tue, 31 Mar 2026 21:57:55 GMT"},"fingerprint":{"sha1":"10:E8:40:DE:3E:B7:54:CE:A5:B2:C7:55:AA:7C:99:99:4A:05:A0:BF","sha256":"CF:21:99:C4:51:91:D4:28:B6:A7:C5:39:28:A7:98:36:52:A9:E4:D3:59:3A:2C:04:81:BE:96:DA:E4:04:C4:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hana-network.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 17 Jan 2026 04:52:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F35lqWW3zyRhG%2BI7U3iuau4DVwgkXwFbeMWhtZYfX8lJXADehvt29deHsbL3uw5TPqdCk9f0sD4BXnJ0a5qqi73SvBNSC3v3%2BIxAd5gipQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bf33de9dc96b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8533,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (315)","md5":"fe7a7a9a9a96decccf59966c078e68c7","sha1":"1007d98adee10d0b78446d99d3210004bd54173e","sha256":"8d97b72686f9323d33939b791dfde1685af86fe461d7e36837374ca4f09b42c3","sha512":"cf28cad248f324754b119dc3e1521055a7145034e1d34599a910a5c043afa5f2ec3e4b6f4f3cd3aeac7731b81e57cebc7c7a86ccce2b56f54dea5c290779ef06","ssdeep":"192:imcWAOHh3YutFx9d4NyJjtuwQ36mdp8DUfwlP5:imcWd3jkotzmdJolR","tlshash":"0902752ba2f001a6221bc4b25342f7146a75950bc63bd4ef72bdc2914fd2e4bc66776c","first_seen":"2026-01-17T04:52:39.352322Z","last_seen":"2026-01-17T04:52:39.352322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":28,"dns":7,"connect":1,"send":0,"wait":144,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-17","alert":"Sinkholed","trigger":"hana-network.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}