{"report_id":"e5e53920-61db-4516-b5c5-cbc6a42213bc","version":0,"status":"done","tags":[],"date":"2026-09-27T02:41:15Z","url":{"schema":"http","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"104.21.59.6","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"title":"DeAgent AI","dom":{"size":5896336,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (39495)","md5":"3790b3e53b2821ad945d365ee42710ae","sha1":"f31a2c56f2c2c0cf06afcb3759df946b654625c4","sha256":"ca1790310a886c8a314ae4769726f6788ff834bce4e139f0ec72436577c2ac11","sha512":"d5dd77df10b9140f8e154e7097041619a3c5f2ebf1c6d9ffa8ccd3d7c6b92838e551cbda7dd081c2a4d5b051876cf857c7fbe60409e41242f708f6efb23107fb","ssdeep":"49152:goWL2BU+1CWb7yEb0UUVxi8BEKZz2Yr6xbjzeOJcCwKl3F2NuFf7DbOL9CpdVSQx:d","tlshash":"f65612338a0e69a71c1c2e6bb19a6c4d6c01f3a3ce5787c9f2c539e8e2df765141526c","dom_hash":"domhashe91910d432303bdf7fd22e1987356474","first_seen":"2026-09-27T02:41:23.510851Z","last_seen":"2026-09-27T02:41:23.510851Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"104.21.59.6","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T02:41:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"deagent.my","ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-27T02:41:17.259816Z","last_seen":"2026-09-27T02:41:17.259816Z","alert_count":9,"request_count":9,"received_data":12070854,"sent_data":4334,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"edc033827b4b26a82e8000f6e932902f","sha1":"a9480b095ea54b0dfdaa3878ac7578b5d5a3f187","sha256":"e360f0ba96a14b8afba28906596afca10dfdf14b9bfa2908a5d1a1ee3f809d83","sha512":"5abcab5dee6bace3a3db1cb2f9315d57685d889e97904675558a30ce622474fba635b2a517c0c8758c1459f951b58fd15bded38ab110c3acc771bd8bc6d4f8b8","ssdeep":"","tlshash":"9fd023f51875c530b3ac034720f5f7a4256121607f115304c1cacc1b6e10dd344b1b9c","size":217,"data":"","first_seen":"2026-09-27T02:41:23.518831Z","last_seen":"2026-09-27T02:41:23.518831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f8b75cfdaa64d6e5b1328e4a983507d","sha1":"0d6619f8169e840f9a8120e480f9bd5df73d22c3","sha256":"ee49534432a29ad9b1704d59f0701869ac69fd677e9466893d1b69c42423a833","sha512":"d0ede20cc8eb91a229d14f856faf2cdaa1b3a8a5b62b5b9836ce82ab10466a052fab6bc29a7a9761eba833daaabc5beb7fdce60def80eb66117a157bb9ab9b48","ssdeep":"384:Kj6yvbw4vI0s9iz33gBtl8pYw9cOfrHND9i9qoTHcYZdnQh7ru:C6Ctm9iz3gvl8FcOHNDwJI8qu","tlshash":"e99262d9bccbf048238598b4007f30ca726abc95645c2f49d230d5e9bd6479bb52bd8d","size":20373,"data":"","first_seen":"2026-09-27T02:19:35.045585Z","last_seen":"2026-09-27T02:41:23.514754Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/secureproxy?u=%2Fipfs%2FoFMy1QYFKJQauC_Wz1buNw9914b7bf853ea968111552ff7f29f68c%3Ft%3D1790476837689","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4eb739a35c4af6433ef6a5c1c7ed7b85","sha1":"1d225ea6712fa50728c99e002defdaf96a44a780","sha256":"fa48af752b188a5f19914ed30e2c774b1aa72e96087b3f5fd1d03f0580dcfe2e","sha512":"b40e2c97cf1ea61a3e16c49c9e5d136893eee1f830eef7bbf40ab62c27a19270f5e092da9a884e3b0237bcea1a15d5e3911e7a74600a62dc530117b79656e983","ssdeep":"6144:gn0n1c1gLP0DYh5gDiu2n4f/zrYmCdeTTliwzZeURKw:P1c1g7cYsfYmCdefZKw","tlshash":"99c4bdc4873b69f6d2cd26b62663716fcf8c1f04238f587862c21dc3a654b1296e653e","size":563208,"data":"","first_seen":"2026-09-27T02:41:23.51558Z","last_seen":"2026-09-27T02:41:23.51558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:37.719Z","timestamp":1790476837719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deagent.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:40:37 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 16 Sep 2026 18:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQcvyRxRQMUs1bN23wtT6Zy6F7%2FfmRWXjMdDEGr9qhTrng4ClfF8bIS6cmfFvDxA%2BcFkzpS6ZkKSzlKe2cDLucDMUh2nDRj7KS45iBHsd%2Ftf6l9gFfLtZw3JyA50\"}]}\r\ncf-ray: a417250bc80e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:38.222Z","timestamp":1790476838222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Sun, 27 Sep 2026 02:40:38 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a417250ee8483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T02:40:37.313Z","timestamp":1790476837313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:40:37 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 16 Sep 2026 18:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bb%2F%2FWNikF1UsvqvvkN%2FK8lzI%2FN7%2BvBdDVQ2MCV0J7r7Fbopt3TjkTnOfr5ILLoSbnHNAmdoBvFPvzwbLdQvcB2Jow4ccq%2B0fOxlEv%2FfuiE6PhwewkRqFmx5wNqEp\"}]}\r\ncf-ray: a41725096fe23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5895973,"size_decoded":3761439,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (39738)","md5":"62c770a833bcc21da5851d2b55f0f78b","sha1":"1f0db2c2a98a5b3c155ab2a05fa79865b2f74ca1","sha256":"78f2ba7fce55971bf03282c8bdf921701ec5374f65005c0512d479a2f48d755a","sha512":"8c49b310a3e7f135c8c1a3f1385ab1b91b176c3d25441ece5151e7aec2e38eb94e067600eaacce275acba931dadfccbdcf833c7329de4f783ca9022b80269768","ssdeep":"12288:AJbJkKoM56JcjuI6/+f/YiQHWF78bQj4WcXbyvGPAwd2uQ4uzj7NGvTsNOnAUEh/:mocS/+Rx78bQchImUXN3Yu2BlShp","tlshash":"9a2502743e0d3a3b3c275270a1e87c5c9d07b367df3d87a6a9c0224d4aea7a22539574","first_seen":"2026-09-27T02:41:23.513233Z","last_seen":"2026-09-27T02:41:57.437465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":198,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js?","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:38.307Z","timestamp":1790476838307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d76008a69eab/main.js? HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Sun, 27 Sep 2026 02:40:38 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a417250f684d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20373,"size_decoded":9881,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20373), with no line terminators","md5":"3f8b75cfdaa64d6e5b1328e4a983507d","sha1":"0d6619f8169e840f9a8120e480f9bd5df73d22c3","sha256":"ee49534432a29ad9b1704d59f0701869ac69fd677e9466893d1b69c42423a833","sha512":"d0ede20cc8eb91a229d14f856faf2cdaa1b3a8a5b62b5b9836ce82ab10466a052fab6bc29a7a9761eba833daaabc5beb7fdce60def80eb66117a157bb9ab9b48","ssdeep":"384:Kj6yvbw4vI0s9iz33gBtl8pYw9cOfrHND9i9qoTHcYZdnQh7ru:C6Ctm9iz3gvl8FcOHNDwJI8qu","tlshash":"e99262d9bccbf048238598b4007f30ca726abc95645c2f49d230d5e9bd6479bb52bd8d","first_seen":"2026-09-27T02:19:35.045585Z","last_seen":"2026-09-27T02:41:23.514754Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:37.728Z","timestamp":1790476837728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deagent.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:40:37 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 16 Sep 2026 18:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdFRXmb81vMU%2FelbzT85PeQTxgqasJGXunkErfHSWE6yQMhD3kWwyMqdZjpigZBRFJk5KgEZ21InqJfaamXc6LS6%2FeeAKkbyc0d%2B81uGXEJWakbQHqnw%2BfeZTgdR\"}]}\r\ncf-ray: a417250bc8123181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5580397,"size_decoded":3653992,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (39738)","md5":"62c770a833bcc21da5851d2b55f0f78b","sha1":"1f0db2c2a98a5b3c155ab2a05fa79865b2f74ca1","sha256":"78f2ba7fce55971bf03282c8bdf921701ec5374f65005c0512d479a2f48d755a","sha512":"8c49b310a3e7f135c8c1a3f1385ab1b91b176c3d25441ece5151e7aec2e38eb94e067600eaacce275acba931dadfccbdcf833c7329de4f783ca9022b80269768","ssdeep":"12288:AJbJkKoM56JcjuI6/+f/YiQHWF78bQj4WcXbyvGPAwd2uQ4uzj7NGvTsNOnAUEh/:mocS/+Rx78bQchImUXN3Yu2BlShp","tlshash":"9a2502743e0d3a3b3c275270a1e87c5c9d07b367df3d87a6a9c0224d4aea7a22539574","first_seen":"2026-09-27T02:41:23.513233Z","last_seen":"2026-09-27T02:41:57.437465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/secureproxy?u=%2Fipfs%2FoFMy1QYFKJQauC_Wz1buNw9914b7bf853ea968111552ff7f29f68c%3Ft%3D1790476837689","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:37.717Z","timestamp":1790476837717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET /secureproxy?u=%2Fipfs%2FoFMy1QYFKJQauC_Wz1buNw9914b7bf853ea968111552ff7f29f68c%3Ft%3D1790476837689 HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deagent.my/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:40:38 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 5966375\r\ncdn-requestcountrycode: NL\r\ncache-control: no-store, no-cache\r\netag: W/\"89808-HSJepnEvpQcoyZ4ALe/a+WpEp4A\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=dLkerux7jG4qX-or6BB0-w.js\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/27/2026 02:40:38\r\ncdn-edgestorageid: 879\r\ncdn-requestid: c8a2deb277df87fd647ffac7091e87cf\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWrPHStwXm6HtpJgKAoOsLTxcYfdl6TUrdGMOKUFMMI5yTN%2FCCfOIkWgs5oub7AHEZ2lp6vtr5J%2BK2EyGs5hzGDpS3UMFknePapvGHfkTMZM%2B4Mo%2Fh80CSzmoP%2FT\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a417250bb80d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":563208,"size_decoded":141352,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4eb739a35c4af6433ef6a5c1c7ed7b85","sha1":"1d225ea6712fa50728c99e002defdaf96a44a780","sha256":"fa48af752b188a5f19914ed30e2c774b1aa72e96087b3f5fd1d03f0580dcfe2e","sha512":"b40e2c97cf1ea61a3e16c49c9e5d136893eee1f830eef7bbf40ab62c27a19270f5e092da9a884e3b0237bcea1a15d5e3911e7a74600a62dc530117b79656e983","ssdeep":"6144:gn0n1c1gLP0DYh5gDiu2n4f/zrYmCdeTTliwzZeURKw:P1c1g7cYsfYmCdefZKw","tlshash":"99c4bdc4873b69f6d2cd26b62663716fcf8c1f04238f587862c21dc3a654b1296e653e","first_seen":"2026-09-27T02:41:23.51558Z","last_seen":"2026-09-27T02:41:23.51558Z","times_seen":1,"resource_available":true,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:37.721Z","timestamp":1790476837721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deagent.my/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:40:37 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 16 Sep 2026 18:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c10lUDUPF6xwYQ%2BJZMlauCeBQZT5G31nMsyOoXXH3buNM19ahaM5BR4nU5u%2BxhnxdHfxVZFjtXLB%2BNnQVZ%2FQAoNKS1BDAE6W%2FN4X859ttfg7pxLkSQydwWXbBnZ8\"}]}\r\ncf-ray: a417250bc80f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/images/grid-pattern.svg","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:38.084Z","timestamp":1790476838084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"GET /images/grid-pattern.svg HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deagent.my/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:40:38 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 16 Sep 2026 18:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=4,i\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BAs3g5SoMFhoSKpeNB%2F2xYhQqg0fDwnWPgxTPVmbyEeMDcl5m9lu2M1UFXRMc6tvpQ7NVOcy3DDJpD4XBgDISLV9X6GYCd8kfwdD1vyyQom8mLVf%2BO%2FsLJOulci\"}]}\r\ncf-ray: a417250e08403181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2786,"size_decoded":1896,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2454)","md5":"b7ff1db9281b87ad07d4f8471929ae34","sha1":"4a20f5a782bbff33fba85eb28568a0cfc28b92c0","sha256":"83e0c3334543fa7114644c8af55da091030ffd11872b9d6d910c7c23455ca723","sha512":"b3bcc905ee6c8df14c58408146fb88a5b7f93d8634e7a79a9f8a07ec53a77c58810645b0e286be45440828e43ccfe15fff90b1c4588f5d0b1ecd7647d07ac8af","ssdeep":"","tlshash":"3d513399eee8b4e132294678b1e95fddb488151bd302f8a4f3d02984c54fd3ace843c9","first_seen":"2026-09-27T02:41:23.51715Z","last_seen":"2026-09-27T02:41:23.51715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deagent.my/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d76008a69eab/0.4065058289648654:1790474432:HS7PT7mOZoYUiKxPaQoT_zbmZLe0mHQ90gNScLUDU6s/a41725096fe23181","fqdn":"deagent.my","domain":"deagent.my","tld":"my"},"ip":{"addr":"172.67.167.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deagent.my/","date":"2026-09-27T02:40:38.395Z","timestamp":1790476838395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deagent.my","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 11:49:29 GMT","end":"Thu, 19 Nov 2026 12:47:00 GMT"},"fingerprint":{"sha1":"90:0E:86:B0:8A:02:FC:7C:5F:AE:10:CA:49:BA:4C:31:F5:DB:54:CA","sha256":"C2:1A:B3:3B:4B:05:D1:42:33:BD:40:FA:EA:7C:CB:9F:42:B7:23:F8:CC:CD:1D:6F:9B:D0:A5:F6:72:2F:9D:FC"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d76008a69eab/0.4065058289648654:1790474432:HS7PT7mOZoYUiKxPaQoT_zbmZLe0mHQ90gNScLUDU6s/a41725096fe23181 HTTP/1.1\r\nHost: deagent.my\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13815\r\nOrigin: https://deagent.my\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://deagent.my/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13815,"data":"jDV8AHnC8UhmFUF3O03b62VTnXMwBhVh7V9ktb3vtXJRIl$-kFfY3tz6zGP5rin33nbuHP9w4DIhPVIrQE+Iy6HvNMNSGC0kvNEpl6APKWbUFbn5J12CdgokcKg1qUoMSo+MGnpP9ImIOZWrg5uN4CnGFzyEAlgq2FMFDNXcPuqJtRcBi$KApwDGe7QZVf1l41Wu3g+Uw8XFe6KjHFqnScZTce8s8FwXgVtnnDISSUT0ZoH5w6y5riq6Xk7BfKgODmc1qdDK1X9Vqk2ijWOJJCYB8H6ACvi4zeb96wAZ3VMTEjiXvzktq9eOqyVV4CE1WgLw0aDUFYwFR1L39f63OUAddRbIDQlX1vrs5W3V6XZup5gL-TmEcwYinCCsSqFLnk47npnZ02P2hqZfgJUJWo+8yvE9m4Ci9blO3dRqjARAXj3FXKdFiqQOsTPKiUEhnUag5KF68Guqe$iQ7jPiS$KLcnfFHhvgf$ZFAvWnHTsNzLt6Fak0aySFZ43rI4DpFwEteZClXl9nzDh2wuG+JpSgbkvWyYpY1zBBYDnUbfzWmPWohwf7piGIFUrdbdn41cI+tWcUP2VpvzCOKOTo4Vas5HtmDbpXQgviWTbkbXJETMq+$XQ7cA5ps8r-O9bCukbGqlfjkz9mQKZfqWmNEUnvRhz-ryG0bQmFZdr1f2NYb8UfnQoSBD40mEgPNkjvtpDMP1-qOJc38eX+XvFKPcpc8DZXVrKOEX9s+28gH+BT1NhTQdjb73Eg+OFwY+tiAznQNPOunh-wcWqAowqXi+KsKQ6TON6VWuAqYoSaYN9OqJh3DQ$ARwZ+REQbcet$im+uFRbUvKQtHUcrp8hgsBcZ1h+A1sKrhLdzOiMIPEcmgHqobLeAA$jAKMwT3cXVSPBrtEnKVRMo7wcW3DkMqv9RhrEHrdz+nd$ghFtRndsnFmpDN8lytPwdke82TDMUCTle865gIOc5bXoa8XgOrOwgIpYSJgRg6WCVp9vkKhZg3DkXDWWqo5e9B9ml1Qosfcm-JHpfk2u41rr3dE54BoHcW0mHl-p+PGuJXIrCUYH9YUqz-HI-F+pvN2Ifr705E9BL$bzuPcCrtkBrm+jrLCsS-$$MpSmudQIsDb9w5uTuyXl-YwHwzlN4Eg9OrHZ4LqDWqqOAkNe0pzpGoCPjufjVQkuHXgFs$p9u9hc7rsaJJfOO6RZiPYqpz3hVwnPvgXen0J8$acDu3F2nuShF0V685y5i$vIzJ$Bjtl8BuTdvVff2Qhvao-4z37-0UzKRQ3J$sJwrK+tjidcyq1i08YAy+t$EaL-u$v7XXMLst5nAvUpq0$r3U-L$-PSsKkiNvwTU26FNf2qrLtNjD884cviu22HtrOAW4CKnrjQwr50qbf+eOIXVWDJ6mtwSgL3QCti8tbv-g7o3V9$VXeYM3Bc8U0JyG3aNB9pqDpjeFZTwVWMURwN1w9K82-X3LEc02TINwS4RicphVeWHTkEPjbVk+mLOcXM6P4l6pbe61+LWz8uVrm1e6IP57DNQY-iqEBZ6PndchjcCo0OWVfF646qDc6je4dMH2ohPG+Q84doe$9V5FZEl6AifHUZknDHeZyhLpDiiaNn3oZps0kewyatlZT-g9O522-HTkN6WrkAH12JsIbOw9d6qkavWYX4480TX9DRDNI0iVJiLBhVqpkLcnHOT2udlwAXsi93rEiNLzsGSfAcytYfAb9jd6swXF5JspWDnnZHW1EuOU1pWHeQwGGOpcnHlE4OLpT138-7wXMVam$Z2jKVjWbsDQo$GvoeP7bCFyRfOT2XEQfQYmB8IhLpmCMOkV16RtQ3iy4$3goMahq-6VP++lmqUf+3oeVWqYQ93gKyIa69WANYDzapLLhqpPqFOkbVR-EorQTAorg8hqImtYEuHXea88H5OsusQ1BfMMIBN37$4VHzfEcIi8A71gEMw6iqq7Pi1N$zIEqHljbFgMrI+97qfm3RHtPnIwVnXSFNZVLDBjvJCVPa5cylRka2tfhVENr1+Omi7P7ga7qs+3W8H33e$bHTfdlVBCiYCHwUNQLPsISnH-o2yygqiMZizoLI3fcysLnwJCCG9ZoeD2Ne0v3LHgKZqupVmfApGFTQ0OdhE9GeQ4a7SHhjZRDC$V4y$l7zPKMzwlmpVqwNjCETK9426EVnnL5OFhL487W9FEXgaKsJh-Xl0CPfic$16yMMOVrdIRESJ0fO2mVJOWnK4iTP1ojXXKGlc$VdDahcgPiEn1Z8jWu2$QDRchbinuEHziqVwKH-Ue8O2XOlj$Y8JkFsEzY3w8uZJQJ1cne6Gkc5v0vBD$ug888uyXDnMPLRKN2mMrNBwGJOAJhhvb6LG06RsMMZFhDUj$ikRhbrZBlIuXlKHFUjTa2hna0cpNE-wazbXieWQ1SXX+J5iRfytzNsaA53F4QXQkyEXay-GyfZ-BN22IyKkCWaD7nBlHlXozayS+paIwGydMA31wqHbk+W58b4N1gccs-bCPuFWB-d11ufuZTlep1Yvm0yb$Rfmprjm4+QRw8CKjaXuM1aYYp9ZTczjkTX4Fmz-mHldUVgMyfUq$$BZCCCl1rcVHC7D4gjfU3eZh66ZhTyom5Li$0GUEd+bXQPTo6d5naMeSn4mbz2sKKWSTYPZb7OkTR7cOIBS1r+Av3YuzFqDATNb59YLdzuj35diXIbdM5KcDlchiKlXPpbgqZBRzbp3dSpmCmIOLLHHjz6C03u6LsGSc9UDfopc1K7sgZdA$fqbVNizpmZmbnQl7jJ$VmJvoneGAt6BzTE9Ob7AmfUpMANVA$Ivmrpe-Jp4mNEjMe2fkNK1bN1AhlgZMlcik6uLe-rJaTOReB18mAtwoq6eXua-coQfDbgZcg3qptS4HB3tUJRgcIcRwj2U0H$+3uSEZs25abCy-rUypVb2ZusMPhTit8MQZLqVALyHXRI+$vaaim2Q5n+VGCBJrQD-AlukLHI1s5ZoSiJmKYttHgPNon+YSudsTcgknAT9uR$C$lw6KAVcvDecTkE74NKU5Ont3QALBqnmUikCESSAYwJNAC5RpysVKbjoPZC9nCVyq9XHnjm4+sB1FWpyT4rvM$81FNLmUQvNQKevIP81ibJQ2qGg9iWw9Ft7dzsY-zqKtFGIZ8XA6BG71OSCJEvyDJckQRGEdD8jwvzp+78eEE3vY8LFr1931Pha2CkP$pgqoUwsyUZsHZouDVRQDcS7TIkIQAOt0ZpPN5cTFHL8Y5qQTgEMYfqJZLd$uFDv-yTdyPYtfsgV1dsjgcyQYERfEVi5Pg3SGJkrq9nbZ562oIM5t8s3XwQIILHr14513BmPwDujmiPtuDK+APDYvdu43mdygIzyq2hiBh6h8ytQF0V4R74K0REoXpOdLXkvS-i1PBu+EiqvmT5Z8qsSe1gRj$RAITJIeHBL3IbmcuDkeazPP1aH6G+69fF78ZJY2StO3AvBrdDPkj-QdLl3df-NrjHI8+qK5KywU0fH$4og8vpZ8oiGcrjs8ht2jUrA-LeVQmSbpKZyY5f2D7Fak9pmMyXA+5WpUnGqZf+gqM8rGHc3lBVZ+w$KlTW-DfeIiqAvKMGuFdflii2gbUaJ8XIOYHKmua488hQ6OOZl-slXwA$wv-80D2NfAsYf$B2l9hqwIkwF-8gb80qo0G6SZS8d-jgZNeVTGROFXmIzy7vei$RYYikpsamDKBmk$DWouiLe0uzhqp4DJ-H8kBFkXOqdokhLwvqnGwgkXY6B$9LHVjGmrH5C0ozGV4lo9Md5kno1ArKA94qOALZEXaIVob2JWY7XOG-pwUFq0vaMtddMTu$SYwFP5RealNfaAfyjwNeaRwuVd6FSG4FeNBPC7-yUaHotw60V9YkMAdVqsulOH+wukht9eCdY+kfQBtIstKhmjj5EdYWvX1fEBT+i96pUyXzDsdA2OnfY5+YcX+dT2mafKRUPJ2Yv3T2I6SNrOVMDOn5DT5Lmzwa-lADYOVdEVf5y6oHqDitL+Gj-m4Knegm4$Vl+Abu2uaCetAUo1L2l$EhyotlZNuzO6uVNFFnLQn55E0D2cOJR$q4zkAX3hqMZ056mfey2PZzc7T$QjvTThY7+JztjoSCIPbO$ug1BXyeJUuo7rU1uF2bElf$AP4fGcbIXXqbVT-+qIrgu5+3LhfqPCiYCcfzszpVqe9DwXuMUywHW-4AePbVBY47+v3U1sJLZNHyXi$PLwR1XF1kIKZTQuADrQ5V+yI3cq9I8+tfjYncsfGa6w-7O+5GOebqKHddM-Ty3GiiJse3uUXzXLAjSbg8EvZwsaCwPTIASOdrnRWE2ZbQVakVG0PKcT-GN-pyzo9UQW-VrL9bh3U9NN3c7Yo-FNo4fg2aiUmgk41vg+oK2tLvVQOCe9+FHEd9579AU$Y03X8QsM9hmR5Zv89BA-KE6s2Ydb9lEPv23JoWmDpG4OiaRw3ftzKK8YhQdjBlLqmqX7P9bmCqh5dAR2L-fTaRu5DX-KvA8zuc9iwnB2Zb$Oc6GafBZaGyOi2EFgCUd42wvUuZ8GDySzhRM8u7aF2mri2nM-Ja0PwRHITGWOVk6MAyK3Goo9u8eMBvfTyTJEkfdLjBZBNzlvUQsllW-M+-alLJ7z-4uZ--YDaA7HAWfMtFp8f+n9g0Y24aGOCNJvAyncXB6ANkJ-F3OSLKjn1NY50UP5-5+AiRQwauEarjyp-hwi0GDEgv3ZIQYOoPbmFczWpVWXN2NLqe-SypywOYfIFQFiMZ+5nm7TOCv-abtQoVVQATCdKl6jKzDZvTFujcHwfkLSqQiLeFmUSSJDhzntbcDV1sQ0L5-CIuV6GbVZPXNzRhI6VY-Dun6h1q5pkQlXnv-qS5PV4LzfKmJP4RV2upbpIwuMbV$i$o13KX4qUCPhJPLiUb9q4z1cV$mOMp20bmQbhK8Phi12SnUa6uj1vjtFEK1fjNa764Y7Ue-JDKHdjNJS0mVApgoW$4MUdwOoTYvGpekfEv6Do8TlkyBice-hY0cN7wiF41S0lHnSzahADdTh4RzYmUQdJ+A2Aci8ipqf2$EYInCI$XSHkGdiQ0DGC8YFIUYky77Iee-VTO8NdvZ2vGa4gzGHj-6CtrprSvpLb1eyz2YJIlo7MDd5-eLzdpm6DgztgemCVFllNtvYkUENofTGypCct3PHO01R-Io0L-yENbQtLOw14pkBe83WlmaDFhiY8w1TkFKgAHNF$V6VX7HBpNDQ$-+7AsYsgtrootAoea0rmDyDiEkJHYIr3gRCajazI5CtW6ZAseP39g5+S6rP9KNsX+T1J7KwqkGMcgZdIlC0EACfugaS+sD9ECqwbTr8ySQ5FIDRA39jIivMQK5fSKyLeiIjk0syYDdKSCRFN2e1O-DRS1BvNTqe5OD6IUggk9K7RU0C9SeVTFlpFrEErJfssr19klYuc3HPe0SfA9pPHzw4l$W-dDBG7E6m4XOYCd8Fnq0XVdV5a96UVOq+39GXCQ$7neKNZ7syzNES2usMPhlm0XCTBHYgvO2oETTeRwzyXumBZ4A9zoKKWZv8sOSD7Ag4WqlgFnUrArRRhv-4Oa8EmyHUXLO+vJ2OtM7uQBDPu50EPbkpw-kAfZ5V$T8aT29OO0LyyBhBcWsOeOU9KGKz-s935vIUr2kS6WVnJ3QUVkGgQP8SC6T38qDVsEAdO3YCNsYGyNWA+3bjJKre3OVH5t6yTuOzgRGBbeogrLSg9oynwwws5Ju83IAXQ5LBu6iCmK90qv$maeeP3UgCKh1VvNt8L57dtmDkKOK3GYllmeE7IOluKcagmWAbvZbWc7YePFPtTQFlm2IIeSPVqLXilDH+w5DwcEHovTuj588RGtp1jT-WaBY+e5Tz00qm02f6i3meaQZQ7ftW82NDLU7LRSqmzVFyLrFk3yDFOftLrmUvXvu4$jdFN-4c10XNZ4ZFWbLrkYXFhk+-3psXyqJY5ydE06g2GtINu8RY$wapap8U6wMIZlV-8nQUkvdIgqyc98EAS9LeJerhlFvNZPb8yPDHVINQtpc1uOXwoRHr-9NOBh1kYnwsZ9Dil3MZiGPr2POk567k5SkFItGLLEd+XiMHV4mFkvPZ8iE5g92W9mtpRRV6Tu36b+$UOraeQEytCmf4tJBvHOEjNk8PchaRM1AFrJfhaCiuLLnoqcfzytQzXQ$k0iqEHhHiKI2Df9QuEDG4WUCV48MGe3eFT$Z7q0sSWX+F7dVWTZtOCXnuCol6i6bOcHKuFDikT5caqaH3GcT+-rfW$lUt62ZeYZzBDGnK23N313UuuW0ydouwZzTjofMn3kYmy2My2ug9J+CpCDA216ToDO2dUWVubFdmgCrncqvogkRtZDYPqOoe0WoYIquS3JNv0p1dFRjwaWcN+oP7FrqRdUrjdqHHkE$W492bd7j66lX2KUu8caVAZTAcwAzsYFL-gwdMHeoCBdH$6aFPdqhoGZ1p7C9cjmHeAEE+ELwCRF9Z7eC1tHHQmMJtrLz22r9Jp0fCW8OkQTmhf+TTSCVXXG+cZnAdnNPePwZPgF2st+MeOAKUiDEsZXM98Z8sBrOlYG7dhNdK1Xy7UwOrH1C-sBFoq-6UGAQS1wLl9IMgRCuU6s2E6ylQg4L-1ojsRsyKNA$wLaVa7tLR3$S8yFGelmjMbLrS2DKh7qFMgZzGq7skOAIAHfIdG9nqPYp6sNKUMYI0CnZa1oqdrcglXG+v0WTMgf5KLhKsX6SfGrA8tbQOaBAkvKzkMDjgRrSSEE8J2yc8RMrjVe0EfAR99cvgHR2UBlM-+IwPDnWsdOXZOBVwPYIJlp8my-Fn6PqoufGBSfnZ2PgsoL5PdO26dusYFoyhZzi0WQmfiy6quQ01gZI7F5YZEanMFSi$B44FMhclkNCUSiAmL$5AM4d4RPAY45yOk89lIklCpVBg7Uu-Y1-3LT3RtHoqIZ4P9tf1fcjlfy-8DQWo2dq+ZO9sqkAXZ7+y5phut4MHAnje-gKOEGflJucVBt6u0gGuedEv+4OwuqcNFN9ilnP9aNFSuRussiDY$3H9rYs0XCWYCc8nBpv+dUzpImBfALQO3mXn4UFn-RpuddJgvQ8FDhQ6GA0iwL9Mv5FPf1DGWuL2F1Fkul$1gimI-MkTCELvcTnkAkZgWQNwrtDfLEGXn63aLh+WqccsKqzqzYZg9iW$pq5zOn8uuokfttk$U9shu-J$oTd901rnpssmNz+9arPCvjvb6l$mmXIWlY403r8lPBP2KH4BKOPDFH6613AlwYIgAra+nOvHSnTq5gLl9WStcEizhVMFn0bgJ3LhBN+-1Kdp3Lh7KbCUEficalirP$$EuTjl6nc6WCTd0qtRSkTZRuH1RFPaG8bTPdAz0oq7KpZcSaeWRW5wn+-4n3spHLzLTG0-KVfp8JTHMH6qw1oZEPBdn1C89uy48GH2eDVy2VCU3FjvFzDCTBBMEw-JsYm+$feXPHUUtfIBGORGnR5LT+-MQq9zRqdck2+zlA+iWpq55AQpVTpcA2IN3V9BP7aYzf4l8l$Mo5rReQp$K3cwr5llZlcJdmRm7YImE2HkUbf-g5u41NOfZwH4B-OAct75+R3TVoKmgNZUGqnIOgrYEpgm0wJ+YPEFwfTkDwwJKiEkAqhs4pJWQPoUUPT+vlPtAQa8$5DSJiR3H+RsOzEBRYZ110qWI3oYiL5RqEJUBXI9WaBEori$sIquNns+Pw$CWN$0eEM5uf30qB4dmBA9+fmdcAEI3LPd-03SCLzIEYq17n1fINySPK1GSwHsQf8-Wdk0GRmF07IG7N4ckCmIu88vh709w63pczsroj6DXdrW7LsmdrlJ7FL7qceYwme4IrKnoOvf2HT3vd-fVzdkmK7yvKT3zK334AZm-E1J7TTOs1zlKetykBglF2W2N8W2c-FNEOn1sZ60GHFuN9$0qyeJo6y6ppJS9od0O-gpgBvHcTtKX3aoM-ybORRYqMRZ7BVD9SkeDI8olaCUM3yV9TK7P-AYFo$aG8Rk1gy1Zc2RRQkrp5GZl2MIHEScH0XcP8tB8cmLTGljgdVqSm6+-W7yw9VzcwYMfAXuq7ZHWzAsepR6P-zcnkXO93oZF2EaHZiaguhWTNjAObR0jRJak4Sob9Z7jvPUP0PwtLWFqAzHSjQmyRJ1KauiKYEJkF-eCPVFEzz+fyagUV34A8akVg4yzpjHJ3NLL9A4BXGYCna3Uj5NmN2sWi+HMFFzbqYdMTthQSJL5fAw5ppJD$Kl6kIvrky6TeBK0R5GqWmdmRDnWMCidDMRk9ufrRF1D6gEl7QtmmSTrD$k+0ONPKpQSHLOyo93K3j-hMng$dolCTu7VLuC1QN1XR9rLponTihHhuh6pLcm$Ju9iTLrBmk4Y0nXnz1KTCQfwMuWqheLf9dzEL$bZiYCO2daPXLs2oM4ELuZhlqVNAhwv0MWkiwUvsrAt0bsiblkZgH0UoROoJlFSXiFam5ts2N8KsJN0Q3I30kNkaYW2PNDHO9Bna8MFcL8VoSF483SnAph9vwpXoWhrK+jQaYqNj5gnyqjNLHjF0rjRblgZ4jSnPIGR6RrSK2MArNA$T15Al+RYm1a1WLbIzCXH2bfC-fIoMRV-DcXQ4Wg6$SAC3EpBZ220oHJZLkEggFTLbj$cgRpRFCUy-s3RXsc5D90OVfDM6ckkFlBbsdO+h1olreJWShNf27m+zAIKTVkUGToYNoll7ZUWGETPWDaJ1nXjzOAqpF39EeMT4FNU5ZpQuarnqsmw1cbGWaLaq6qO6r84jFb$NTpRfKDHv4KnyaS4rWJspyNjW9Hato9JCXfHmzmS0MQmieDSnyE8-dBsgPi-QbsyqiSDKnT2Gd3+KekbFX6-9oMv0XeLYS5GpzQqPVZpXG22uQVGe0Ni0Ft-KM4r2oGHIYu1fF0h07cWw4HebAq+tfrWsaJkkbske2i3dRhTY-V2ZU+U8PR2JKz7J9AbInl2LLBaNFTmJWW1Jp7sv9TQactgTnUnwRj$DJASfsn14MDvpkpGfd3URlibwR71FgD3I699ueKEHEawFVYrc4mjsWa2gzM0QT1FQdfARDqIoECy$CHiV$RTFU3gIWa5XLRX8E0Pe6sPAW5b5gveFfTXYyBa0$1XFV3VdLrzTt6XPTTCCn4gYFf1r2GyZe$IkgIyBQJYdycTTVyGGoh11qY-Yn$E5uUmenRg6sOT6DcDIUIhdFSRpL47rHHaARDnojV6m2B-EhTF5gZf49N-RcWpUS4g1Gk0wGArXH$A55qE9HAAweW0K-bmjBP4PXEcIvD+w+8taLn$GuefA-AyFb8-26rzsWYYkeuIkgfFF60N7Do0PtAgk0i3i9YBgqGS1920lm-pzE2cAbfiQXlyaNdc9niMDSZpqtEeYoIA$CarkdWQABYw+TYvysw6L$7DyvMBMDv0hFztZOTgQtO1ynalOGbvi2hjBMv4MprO8dyk3C8yE56Y+ce2tW-3Et6jM9-hXmUII0vvdffFNn0vVz8rhFQ50I4Tnd7LO8iBDAr9GCfQctJqhWqZ7nIIKBLHfePtIu-53qilmP-Q+PFtfvLZLaLs6-oQlT610osuKg$ChHUFR2goCE0oWGaJ6znLc-tVMMzzp87TzRnkz5Br-koo7bszj3e3YAi9VDgfArFVXh2hvSYqiFbft6Bc$orCVHmbqafsNM9$LzS-o4jMoh+fKNj+MIeFMzZi+JGfT-nncGD8yek2W7u7enBfbcT5nEcaBaS1+DHdDi3cMwmyDl4Lu1rQkMy+bkwJCgwGLKwoFc4N7KOvnPNNJWaAao385lG+fT9rLP41VKI7pHDjmYg1GuPw6rhJire6Q8XlaAEPzOOTzM2nFvLB890cpdRIDRUhW9b4X1yykweGOQASJ2PJphEng8Fv73kw9a$JHo3$+pmW8+rQBN39m4Hwg-fEVmwXF8DKOvij1aR-5Z5qnJDgc9dt2F3zCYFQBEqm1d$YVJ0ytvS9Z$vdz3$UI90r1B1oNV3TnDFVvvvKC$F6Pgq8hMv+HQsJ4DWzsn2NRc9s1IVgTZiuKh6PGBKUjeKjXrOFTawA6JHTXhCdVfJlajFhGoBUQKhw3zuk7embC+WMjyncmhJEUoKCAJptEUnd6CqC0LrUho3CLPpJwTJAXTwHgdc8v-ZE9aGcH7etteA+PtKQCXKGi-Bpb8dkyzf5wE70m1ZcuHSS0Zs24YQRudiMd5U+4jJkZNupwY$VNec3i4SRBdtN5DsoRoWNPZcOIdNWyTv-G3CMmKP9F2XUpzw4srmSy5EX2wflzFs174u82BmnC+DmWOn3WEUz8gRvvGA7DUiv1fDn7sQcRAuyZX+qUWEwupuCJ7gvBsSzehAOcZZ3eyVm8ufkfuiwHyGuZYe$HnJir0+M5VEP7BHgGMNqzNTWvkHlvU8ZpVpCnep6Guy9tCeazv4Otn-JKRygap4yRMYFGa-d4WeA0gQEsj8DoGomL1WPheVeIhsJX1hwlmTHeO$l91mpkqvKfROmguugAW78cm1zVQ4X7cYtlH7ACjRw84O5VkL4CEca-prwyPIvmDMgzQLv2qh0MbYSlOHy1RSJT95$4nZl4Vb2BZucgawK7SJGMAlY5v9E4iIdho+pJ72-NGiQMu-ZONmAUSuIOyQG06OC9FQhyyuKH97n96bDVjTy0z0uVKnJE3w-Y-asZpOMGPPj0vWaKHiBBeiF+wnOB7Wo1dJRdL1hX$VIcTVT1-mI+p+wNMU5v+-6dDJqKfKlSaDfz5NCiuO5l5a0KZ09Cj7$RIQ3omonhLTfWkuVzHLJ0FQJWAQOEonkqRzKIrXnh$LJCDpYeYaA$iBFwQXslOcWytMc+ZzDa+$F3Oed6XULRtuYGzr65$L1P3I0rJjtzafWe3RwImXdpuctCnIKbPgWLHh1IB-ReoFLnA6IhVoKXBv7DvGPwoHIpteF91MgKyhRz8UJwNjDzXa5vYGMb6ruH$6hZQ7tDIVgQSyUBB4mv9h$nyD2QYozm2ElYoYGC6PjfKYFJS0BDA5nFRCsuEOcIrLJaXo+yIAFdbR95EiHH$gBQYm0zKXAyOttFGOdAH0d2AGI7fVNKaFs4F+fQs+aZ3O+nrXOVwU4Kh7kDnr1zZ6hlRPww8o2gL20XqaD0jay9m1Ggi3oKYWZt++1OUZ$mI06MW2E1vT0q1ruFvP7L5DDvXZa3PSndvN5AS0WTurfdNFbEZhwRvk6+8oE5t4hI$rL$JgICs9+G5Ie5GNHFBnNVd+DSEtZShEAdOLWPIKINlAqFgb2aTLNOgGQmrF7G2L458RYh8fvPUy1wn8mO2c8--hkLLoNaa5E4yoCmgU58Hdsko9KZSs$bFO5yognH3LBl9jyn-dA-viYmZMKc5$uK4oWg8y2MUI7s7RMrJjajn-j4I1ZZ5Geez+1I7iZVUTfVLDD1nNHBKJnIa7al$Dfkj00Ql4jzd$YCkulzVs5ZEjGnhSSM9UdamZnBCn-hJpm3$5bdsTMlAP3yezrvI+MpLJ84q4AK4WX5zZrrha5WnMntFf9DiWN-BHlHsm5X26AnEcZ-3k+bhdJDj3VVoAq0IpD5q72fGctTImwGebXBHcmWcJarjRySM5O8LpVQUtX2HKoqimDTNc+dsScbqrb67fsUlHbzXu3IA8LYTzaZd3l2Hmmu1XNdYLgWGbjeK2ujzXPLVsFgL9Y-yeI$wH-FuYNbCNsWzfNQR+cQsa0yltWZ1Or-4vvzJYc++2Zeb1T97pU6DCyrd-rnWc4QoCoE7tQoY6bllrRv-rmJs6bPDsf55ypVQTVVl33PDdG$dsV+4Yv8qZ7dRk9feEzn7-CUt2VQk8f841H2$Rc4EahkgumRVt62HiE5Mte9WXkWi0Pnn-oEZCKrFmu2ocXQbGbvh662LBacTm+bg7o$1X9UfuiFl$jf3RMimcvYWnvz9m4Sba6DM2RzwMjOtLdKKjuUkh+j4Yq5SrLgaLZQWMcnOD6WklRWzO9R2eM5is6FlKHDz5ZH6-rfAlZ2J2J8-BdT-i6JemdsCVs2O-tpnWHZwMp75O3NmiX-REsUCOnn7Ln+rWSBykTL6JMn65R-530nmyyFc0usq5uqDQVCLfEIIucYLb5zWfHAEB37n8pc$aOP2Vqo7zC4wEcQucuZNTlP7-fA5MQlB61OgcRGBbounrLeNDh716aFQ7FH80yfC6+J42r9D8oY9yQ0RfFSCg6wrYXqwGhaVVvgDFCftL0tisGRPBRn-02vME-muUkVWGMLF34PyT3mkRlrc7BISkoXS7AX4UFXGtzHfJUy4VZO5Hf-nAcEqc1$9i9gmvCCYKrRO4eLv7aJUJbBDbZGRJ7hN2Veo3ou3v0RjuKpPtQCTJWOpYqJp34hFrwrZJm91OXHSTqEqMEc4UtFpkrYXqj$tNmW+1GX1chQfJg63OAfX+lV82NAsS28FdDflOV26FXnaO201p2fFzZFB4uQlF+wPJvdcjMvbsEG4tOk9SDDXWEh33A+saCqypC+V9RS7tTHwvEiLmF6moy2FNK0jz6qoygYFGJshwEqNza8EyUJqV1Hq-rrOZg3dR$e92pygJyZ54hbUa6ffwJVTg61SsTNlCwoTfK$aqhjm621wDtVSA-gPnuWCwSnQj3Av1XoRvOhLYun6vaP-EyHk$l266dgV4Pa5PTP6Qpyo0UZldkIAG+-LJtPswU69MVYCBUIfUaXkUiGAAHLEBjV$LyT5AM-y1KWAcrGjvk7eK+4BYlTUZboIwdcU75S-Qcy7TWXJzjBCA4+7QjCN-WqpqoiDEgchpA9+2jCuVQ2$eXiZDKAkB7zWlm8+qMcO184Ovf8ufbjtFGtiXalW-rr3hiMHyfu3VqY0qwjXAIQJRHk05CAyZHZFc3bU-fmSXuN86nQs1OahEmckRzkgbfuYJZXgV4uA6BJS74yjLc49VW8BVU$y+mB5QcUybPnYLTr+divLQlGQHc4I8g-SAj4ANS14hrZZe9dC+ogt70QRS9QjAqX+NrynWw1+gTGL+Sji27Rz5RByo02UpFkH+KEeA84zVItJpRn409PKkpFi4ZcHDut-gs7jYyVpps0+Q6QHevo6LG+UMBRY4Ikp0goi9rd+wO7oQUC9GjqwIDWfEBLle1IW1aEu7$jy+YVXcnleWDGAJlt$YZ4LAfeKZGemjGpYkVMt7dua1T75-g49wgq$mf2OCsohr4tsj-aEq+21$jn9abrpLgP2DsdXAVa1BsfAVE7-tQBT6mTi48jAyS3zwZSE56-Zba5do1TsUajlsF7iP7hDi3SadiYsAwy1hbXMzrO9n-r-mJl7yzQjBQbPrO7oDRr2CXidhyrHQ7awutQFjV1sQ1FNseQdbSGe+ulGQnHOVagpgKp95ahIKi$EOrrWyyIJBFmEMPWQk+lfudiBVki$IbQ0RJ54sab4oMpPVckHhtQ4Y3jPahaPMedUJvgz9BS8HGavr0BPDJblbjFsFG-1Liso3K0JeuU2378HKjYnpzeuINiXwH-559cfG3GvirvyN7AGNGjqN1VALyQv3vdZVVov29efESiiYajAR$mmYYCkQtwc7zMGWR+VkBsS93Ah4Ym45FX-neg92mJtn8Py74fZy-KE0ncwPKqBbQX7$RF+S3Dopnosm3q+tm$NA9ydLHtUjqql1EWZVzCGsoqWO7AWwVShvhVimf4PCa4FjQqz7BjBYTX9nlBjLeqV8KNA9EJOA5rWC0QAuC1nwhYwMq6nafejjKRe085prk3Vfi-4DzClqTolJAPUFzUktcY3cUWfEnenVJM-4f$33241Cu$pHbyhhm9vgk$uNKpPh5viere"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: UrahB6alQ49uKi6M77/MpoGsxk5pbz4L0J1XZzVlg/YtsI3ZL7btOkHs1fushY820os6C/HBYAUYZm/BhxUHwgI+RE+N63mzV7KmwkdyATX6rs1TW701UbovnDo/n3jOICh3qHipgi701uUfdroO4UypIztx0oRBbad7hPm7MiK4nVDFEm9Nnrvd2Quy8XW8r2BqFYN4ChsMbzXJhhO4mPqAa0FEGpQYcour9XSYFx0htSLg5DDhVBNOEHSRq64jpL/248brFQu30+utlwEcMmyEssWprMBETXa5omKNL4PDgvAhWkNR0NFDX2mqXs4vX33gIohyTlQVpfaOdhMvKu+/OS08bUaewgO82qXOFjrun53vI4OT6w2YAYzr0mVBKB8G/DdWi0UuMJRZTTal57k53MGEjlvU2e8Mt7vFQxAtGIqpzIJ3JQNjGd266WxKsDhJpa7OmTf7iVVWoIFrVQ3V6wSsWQFsqfhcbUzMyjchFPa4MotRZldlyH6ORFB9lTfvyNs2Oqw5fjsgVlIvyA==$AUwm1HvzrchwcPbrZYP/0g==\r\nset-cookie: cf_clearance=vL2n1DJMaglNgvRl0Ha90R99pD.LN5d7ALUQ7WTndAA-1790476838-1.2.1.1-Is.ZKFvt5jZ5d7bzWUGXeWKYhA1qrNQPQAyYduYekul8g5thW6jMJJ4.dRACzfn4TY9TX.kn_m6JPFlV9wUEQ651gLGc4SRuQqot5OSJ5Va6Rw5AoGlaFWJfSCROs51daN3QVWYqMvr_I_h1It91wM5U7R.F50YU.sWOZv8wQDMdgIlX_wlqWJQSwmas17N9rc9GMD3J5ojAzgPKLhAQxhtET8Ys3wY_At3uF4Zr.sYmdp5yEjZCSrfiJFpCkIRTVhJmR7tYlWpvFGy124ktwd6LxkflRnLA49zjL911lvf7e5sPr6KjhoV9zSlzDWAb89U7X50MNEjKZCVA.XLEuugT04EFwA2Iqj8c63_yH.oxbwR.nk1Gc_KcrVoUuT06vUiRDiTFV7x.BMhmkszNg2ml4TGmfKA0LqbU0CxiTQs; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=deagent.my; Expires=Mon, 27 Sep 2027 02:40:38 GMT\r\ntiming-allow-origin: https://deagent.my\r\ndate: Sun, 27 Sep 2026 02:40:38 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a417250ff8513181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"vL2n1DJMaglNgvRl0Ha90R99pD.LN5d7ALUQ7WTndAA-1790476838-1.2.1.1-Is.ZKFvt5jZ5d7bzWUGXeWKYhA1qrNQPQAyYduYekul8g5thW6jMJJ4.dRACzfn4TY9TX.kn_m6JPFlV9wUEQ651gLGc4SRuQqot5OSJ5Va6Rw5AoGlaFWJfSCROs51daN3QVWYqMvr_I_h1It91wM5U7R.F50YU.sWOZv8wQDMdgIlX_wlqWJQSwmas17N9rc9GMD3J5ojAzgPKLhAQxhtET8Ys3wY_At3uF4Zr.sYmdp5yEjZCSrfiJFpCkIRTVhJmR7tYlWpvFGy124ktwd6LxkflRnLA49zjL911lvf7e5sPr6KjhoV9zSlzDWAb89U7X50MNEjKZCVA.XLEuugT04EFwA2Iqj8c63_yH.oxbwR.nk1Gc_KcrVoUuT06vUiRDiTFV7x.BMhmkszNg2ml4TGmfKA0LqbU0CxiTQs","quoted":false,"path":"/","domain":"deagent.my","expires":"2027-09-27T02:40:38Z","raw_expires":"Mon, 27 Sep 2027 02:40:38 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=vL2n1DJMaglNgvRl0Ha90R99pD.LN5d7ALUQ7WTndAA-1790476838-1.2.1.1-Is.ZKFvt5jZ5d7bzWUGXeWKYhA1qrNQPQAyYduYekul8g5thW6jMJJ4.dRACzfn4TY9TX.kn_m6JPFlV9wUEQ651gLGc4SRuQqot5OSJ5Va6Rw5AoGlaFWJfSCROs51daN3QVWYqMvr_I_h1It91wM5U7R.F50YU.sWOZv8wQDMdgIlX_wlqWJQSwmas17N9rc9GMD3J5ojAzgPKLhAQxhtET8Ys3wY_At3uF4Zr.sYmdp5yEjZCSrfiJFpCkIRTVhJmR7tYlWpvFGy124ktwd6LxkflRnLA49zjL911lvf7e5sPr6KjhoV9zSlzDWAb89U7X50MNEjKZCVA.XLEuugT04EFwA2Iqj8c63_yH.oxbwR.nk1Gc_KcrVoUuT06vUiRDiTFV7x.BMhmkszNg2ml4TGmfKA0LqbU0CxiTQs; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=deagent.my; Expires=Mon, 27 Sep 2027 02:40:38 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15938,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T01:38:32.742437Z","times_seen":19111367,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"deagent.my","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}