{"report_id":"eb2685d9-b180-4eda-bfc8-d6fd2ad883b0","version":0,"status":"done","tags":[],"date":"2026-08-07T08:58:29Z","url":{"schema":"http","addr":"luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"title":"W⁡elcome back! Please log in","dom":{"size":236652,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8890)","md5":"86dc936369cf69c8f3b86633613313d1","sha1":"801ef12ba1d05ce6ddf2edd49b917df5ab892063","sha256":"723f2e04b3bfca4e8a0770288bd5c9c240ace2601646d795014d0e2de5a9d64f","sha512":"4c1bcd9925d1769cf7ff08cd872b3a2c0c45b85f2735387d604a79465494ef212b1054070e63ea4a834c55d9f20744d6b1ffedbe9797af4050aaf5a4cb9cec6b","ssdeep":"3072:fPxLrZOPo7hb7h81YGmYGL0x7hlodO1YG+xYGPa0eYGAJL97hTx:nxLrZOQh/h+rmrLehl3rSri0ers1hF","tlshash":"2f34d71692e100f34a32aaf656ef3709b2a480f7c9065660f6be62544fcef08756777c","dom_hash":"domhashee37870489fa103a331755fc5a1e2093","first_seen":"2026-08-07T08:58:30.622035Z","last_seen":"2026-08-07T08:58:30.622035Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-11T08:58:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"luderlawe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"luderlawe.com","ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-07T00:49:06.594718Z","last_seen":"2026-08-07T00:49:06.594718Z","alert_count":4,"request_count":4,"received_data":346739,"sent_data":4051,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"crypto-js:4.0.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-02T22:44:21.067894Z","alert_count":0,"request_count":1,"received_data":49001,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-07T13:03:29.844105Z","times_seen":91334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"luderlawe.com/smooth/assets/js/client_geo.js","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4644c2e1c3cf12e1850307dfafb3ee6e","sha1":"8a312b43d7600e4c9aa97985832cbd9737a86650","sha256":"7c3b78804c8106f1d185fa54aa6f4cfdc044e5aee3caa085a30dd1d33e89ab7d","sha512":"2798fc2477d7ce796d95bea0ee6112a42d2bf4e78d69483222fb2cc9989e5237f27e2cf1dde1bbe39e5c6f73651646b152b3d06e51b20f89cbb3b6cc96f506b0","ssdeep":"3072:Hc01li+y4KcrC/CqN/T/DDcxeFlQUQIqycDKZQBqohYxrQ+zbReFlQXWFk:801li+qcrC/CqN/T/fc0FlQbycDKZTow","tlshash":"5704848177c27c9212475bb3771bf1e5ea2a8dd8b0c8488bf544bc58f4bd926eae0531","size":176102,"data":"","first_seen":"2026-07-17T17:57:42.66015Z","last_seen":"2026-08-07T08:58:30.634243Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"luderlawe.com/smooth/assets/js/url_helper.js","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","date":"2026-08-07T08:57:51.334Z","timestamp":1786093071334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luderlawe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:32:40 GMT","end":"Thu, 29 Oct 2026 17:32:39 GMT"},"fingerprint":{"sha1":"94:8B:FB:6E:E3:BC:C9:7A:D2:82:34:94:2A:EF:FD:EC:23:53:39:AF","sha256":"68:BC:94:ED:BD:0E:9E:DC:9F:36:08:4F:13:13:33:96:71:51:AC:AA:52:6E:A2:AD:18:7A:EB:87:91:19:8C:53"}}},"request":{"raw":"GET /smooth/assets/js/url_helper.js HTTP/1.1\r\nHost: luderlawe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2\r\nCookie: PHPSESSID=38ffbbccc02c64462c2e81796ae1eee4; sw_client_geo=%7B%22ip%22%3A%22195.64.118.152%22%2C%22country%22%3A%22no%22%2C%22country_code%22%3A%22no%22%2C%22country_name%22%3A%22Norway%22%2C%22region%22%3A%22Oslo%22%2C%22city%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%5C%2FOslo%22%2C%22isp%22%3A%22Blix%20Solutions%20AS%22%2C%22org%22%3A%22Blix%20Group%22%2C%22org_type%22%3A%22%22%2C%22ts%22%3A1786093070000%7D; client_geo_ip=195.64.118.152; client_geo_country=no; client_geo_country_code=no; client_geo_city=Oslo; client_geo_region=Oslo; client_geo_timezone=Europe%2FOslo; client_geo_isp=Blix%20Solutions%20AS; client_geo_org=Blix%20Group; cookie_test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 14 Jul 2026 07:31:14 GMT\r\netag: \"117e1-6568d31137480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-length: 28320\r\ncontent-type: text/javascript\r\ndate: Fri, 07 Aug 2026 08:57:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71649,"size_decoded":28752,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e26c9ddd3d8739a9c220f355f87374fb","sha1":"55703e6aaec8bca0689c1292c197c3e7eb0dc20a","sha256":"3e73a0ff5b0bdc6fc4a0e92ea49dc675bf02cdd72cb0305fbf79705d91e9eddc","sha512":"2c1a4fd4910121cca1ea672411463de0933b9de740f75f18a961ebbd24fe9d961c7f088f45e3b9c41adf9872357aa4120d20877928f39f95792e3fdbd0297f76","ssdeep":"1536:EX9RAhTqSyQPx2+obcJp2jxGOATZpla8wQ37EMU:YAhmXoA6sj4OATDFwp","tlshash":"f763a380b7c2b881128b1bb3772bf5e5f52e8dd87589048bf500bc98f5bd915eae5930","first_seen":"2026-07-15T19:08:02.040414Z","last_seen":"2026-08-07T08:58:30.626054Z","times_seen":9,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"luderlawe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luderlawe.com/smooth/assets/js/endpoint.js","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","date":"2026-08-07T08:57:51.335Z","timestamp":1786093071335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luderlawe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:32:40 GMT","end":"Thu, 29 Oct 2026 17:32:39 GMT"},"fingerprint":{"sha1":"94:8B:FB:6E:E3:BC:C9:7A:D2:82:34:94:2A:EF:FD:EC:23:53:39:AF","sha256":"68:BC:94:ED:BD:0E:9E:DC:9F:36:08:4F:13:13:33:96:71:51:AC:AA:52:6E:A2:AD:18:7A:EB:87:91:19:8C:53"}}},"request":{"raw":"GET /smooth/assets/js/endpoint.js HTTP/1.1\r\nHost: luderlawe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2\r\nCookie: PHPSESSID=38ffbbccc02c64462c2e81796ae1eee4; sw_client_geo=%7B%22ip%22%3A%22195.64.118.152%22%2C%22country%22%3A%22no%22%2C%22country_code%22%3A%22no%22%2C%22country_name%22%3A%22Norway%22%2C%22region%22%3A%22Oslo%22%2C%22city%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%5C%2FOslo%22%2C%22isp%22%3A%22Blix%20Solutions%20AS%22%2C%22org%22%3A%22Blix%20Group%22%2C%22org_type%22%3A%22%22%2C%22ts%22%3A1786093070000%7D; client_geo_ip=195.64.118.152; client_geo_country=no; client_geo_country_code=no; client_geo_city=Oslo; client_geo_region=Oslo; client_geo_timezone=Europe%2FOslo; client_geo_isp=Blix%20Solutions%20AS; client_geo_org=Blix%20Group; cookie_test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 14 Jul 2026 07:30:34 GMT\r\netag: \"12bea-6568d2eb11a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-length: 30603\r\ncontent-type: text/javascript\r\ndate: Fri, 07 Aug 2026 08:57:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":76778,"size_decoded":31035,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c155879bb535913b64dc28788cc4f375","sha1":"ee14a618943911cdeae23d701ee2fdb8eafccf0e","sha256":"c1c021d917ff51125fcab0c86bfbc851e769003d4fbe15ff4b46e0c68f00b87d","sha512":"a12f881ea2c0069922787a3ecde13e9e183ba1ad354e6ddadee69d3f0ba933675ae9316f6805e353911a0f131e481c403c28a367b9615365fd4255d87493d694","ssdeep":"1536:IEWoy4kV3QHaOLejCG1vNvTTUJZ0nvADz+sLgpx3+BGrQO3FO9rsuz/yonNU0UHh:IEWoy5VHKejCG19TIv0nvO+sMpx3Nr9n","tlshash":"8673b4c277c6bc8112876bb7b71bb5e5f52a4ce474c4488af504bc58f1b9921fae4a30","first_seen":"2026-07-15T19:08:02.041568Z","last_seen":"2026-08-07T08:58:30.627551Z","times_seen":9,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"luderlawe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-07T08:57:50.469Z","timestamp":1786093070469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luderlawe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:32:40 GMT","end":"Thu, 29 Oct 2026 17:32:39 GMT"},"fingerprint":{"sha1":"94:8B:FB:6E:E3:BC:C9:7A:D2:82:34:94:2A:EF:FD:EC:23:53:39:AF","sha256":"68:BC:94:ED:BD:0E:9E:DC:9F:36:08:4F:13:13:33:96:71:51:AC:AA:52:6E:A2:AD:18:7A:EB:87:91:19:8C:53"}}},"request":{"raw":"GET /smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2 HTTP/1.1\r\nHost: luderlawe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=38ffbbccc02c64462c2e81796ae1eee4; path=/\nsw_client_geo=%7B%22ip%22%3A%22195.64.118.152%22%2C%22country%22%3A%22no%22%2C%22country_code%22%3A%22no%22%2C%22country_name%22%3A%22Norway%22%2C%22region%22%3A%22Oslo%22%2C%22city%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%5C%2FOslo%22%2C%22isp%22%3A%22Blix%20Solutions%20AS%22%2C%22org%22%3A%22Blix%20Group%22%2C%22org_type%22%3A%22%22%2C%22ts%22%3A1786093070000%7D; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_ip=195.64.118.152; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_country=no; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_country_code=no; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_city=Oslo; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_region=Oslo; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_timezone=Europe%2FOslo; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_isp=Blix%20Solutions%20AS; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\nclient_geo_org=Blix%20Group; expires=Sat, 08 Aug 2026 08:57:50 GMT; Max-Age=86400; path=/; SameSite=Lax\ncookie_test=test; expires=Fri, 07 Aug 2026 09:57:50 GMT; Max-Age=3600; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5054\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 07 Aug 2026 08:57:50 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"crypto-js:4.0.0","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":19212,"size_decoded":6779,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f40843bc4a6c312871dd68c17e4bff9e","sha1":"edffbfc77bc670680d4416302c081f08e83bf05b","sha256":"eed23ea9db36d2367e4b866bf96faf51ae10f2c7bcb63fb4f979fac76412559e","sha512":"c75b77f13858310c411b20fb841b603224934fb5231c0d7297f511e5e8905b0eceb04590493951bf58b97d07967363c299b8e4ad2e988350517d5f3958eae787","ssdeep":"192:0HSsMZFrkhBi6bJVqIz5PC7XMTkEc3aBn28uqKdF8uRmzAyZrrnf10Gp0stq8kQA:kSsYFrk3i6lz50zY2GSNHH5l3Dke9xWs","tlshash":"2682314b66f312615c63b2720fffb7593931e003a249de597d0d67908fc7a82e852ba1","first_seen":"2026-08-07T08:58:30.631033Z","last_seen":"2026-08-07T08:58:30.631033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":48,"connect":102,"send":0,"wait":250,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"luderlawe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"luderlawe.com/smooth/assets/js/client_geo.js","fqdn":"luderlawe.com","domain":"luderlawe.com","tld":"com"},"ip":{"addr":"167.99.232.185","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","date":"2026-08-07T08:57:51.331Z","timestamp":1786093071331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luderlawe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 17:32:40 GMT","end":"Thu, 29 Oct 2026 17:32:39 GMT"},"fingerprint":{"sha1":"94:8B:FB:6E:E3:BC:C9:7A:D2:82:34:94:2A:EF:FD:EC:23:53:39:AF","sha256":"68:BC:94:ED:BD:0E:9E:DC:9F:36:08:4F:13:13:33:96:71:51:AC:AA:52:6E:A2:AD:18:7A:EB:87:91:19:8C:53"}}},"request":{"raw":"GET /smooth/assets/js/client_geo.js HTTP/1.1\r\nHost: luderlawe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2\r\nCookie: PHPSESSID=38ffbbccc02c64462c2e81796ae1eee4; sw_client_geo=%7B%22ip%22%3A%22195.64.118.152%22%2C%22country%22%3A%22no%22%2C%22country_code%22%3A%22no%22%2C%22country_name%22%3A%22Norway%22%2C%22region%22%3A%22Oslo%22%2C%22city%22%3A%22Oslo%22%2C%22timezone%22%3A%22Europe%5C%2FOslo%22%2C%22isp%22%3A%22Blix%20Solutions%20AS%22%2C%22org%22%3A%22Blix%20Group%22%2C%22org_type%22%3A%22%22%2C%22ts%22%3A1786093070000%7D; client_geo_ip=195.64.118.152; client_geo_country=no; client_geo_country_code=no; client_geo_city=Oslo; client_geo_region=Oslo; client_geo_timezone=Europe%2FOslo; client_geo_isp=Blix%20Solutions%20AS; client_geo_org=Blix%20Group; cookie_test=test\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 14 Jul 2026 07:29:54 GMT\r\netag: \"2afe6-6568d2c4ec080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncontent-type: text/javascript\r\ndate: Fri, 07 Aug 2026 08:57:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":176102,"size_decoded":68970,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4644c2e1c3cf12e1850307dfafb3ee6e","sha1":"8a312b43d7600e4c9aa97985832cbd9737a86650","sha256":"7c3b78804c8106f1d185fa54aa6f4cfdc044e5aee3caa085a30dd1d33e89ab7d","sha512":"2798fc2477d7ce796d95bea0ee6112a42d2bf4e78d69483222fb2cc9989e5237f27e2cf1dde1bbe39e5c6f73651646b152b3d06e51b20f89cbb3b6cc96f506b0","ssdeep":"3072:Hc01li+y4KcrC/CqN/T/DDcxeFlQUQIqycDKZQBqohYxrQ+zbReFlQXWFk:801li+qcrC/CqN/T/fc0FlQbycDKZTow","tlshash":"5704848177c27c9212475bb3771bf1e5ea2a8dd8b0c8488bf544bc58f4bd926eae0531","first_seen":"2026-07-17T17:57:42.66015Z","last_seen":"2026-08-07T08:58:30.634243Z","times_seen":8,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-07","alert":"Sinkholed","trigger":"luderlawe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://luderlawe.com/smooth/zTzSgqqazyfNwxWXNaGAwEO7qhkxYH64xPOp?-m=bJv0VSF2","date":"2026-08-07T08:57:51.332Z","timestamp":1786093071332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://luderlawe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 07 Aug 2026 08:57:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14107\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:09:17 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucyIuc5jCsdlDzxGM0TRbyO%2B8OH2J11GTJSn9T13b%2BfTqubn768AKP%2F%2Bjd78FfHzydDkSQCudeJHfuciVdvDZNr9ZOdo2CAoyjmdY5cZZn7QNojGAWJPZiaiHKsdnG%2B3RkEng4d5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a275137fe80e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47992,"size_decoded":15116,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47992), with no line terminators","md5":"cf3402d7483b127ded4069d651ea4a22","sha1":"bde186152457cacf9c35477b5bdda5bcb56b1f45","sha256":"eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc","sha512":"9ce42ebc3f672a2aefc4376f43d38ca9ed9d81aa5b3c1eef60032bcc98a1c399be68d71fd1d5f9de6e98c4ce0b800f6ef1ef5e83d417fbffa63eef2408da55d8","ssdeep":"768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe","tlshash":"9c231bc1a19c219152a774d0093f7107b463353a460ed5acf668e9eeecbcaea903dd7c","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-08-07T13:00:19.819009Z","times_seen":77027,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}