{"report_id":"f0eac80a-f405-421b-a21a-a3e906269d4b","version":6,"status":"done","tags":[],"date":"2026-01-24T13:47:33Z","url":{"schema":"https","addr":"connectlayers.live","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"connectlayers.live/","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"title":"Floki Staking - Stake FLOKI and Earn TOKEN","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"connectlayers.live","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:47:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":5,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T13:47:25Z","timestamp":1769262445,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-24T13:47:25.644828+0000\",\"flow_id\":1901840734990294,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":58342,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2026-01-24T13:47:25.634838+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T13:47:25Z","timestamp":1769262445,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58338,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-24T13:47:25.649326+0000\",\"flow_id\":690711497125571,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":58338,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":915,\"bytes_toclient\":1654,\"start\":\"2026-01-24T13:47:25.634563+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T13:47:25Z","timestamp":1769262445,"ip_dst":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49612,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2026-01-24T13:47:25.686821+0000\",\"flow_id\":563949832323191,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":49612,\"dest_ip\":\"104.18.10.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3508,\"start\":\"2026-01-24T13:47:25.671863+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T13:47:25Z","timestamp":1769262445,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":50312,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-01-24T13:47:25.738482+0000\",\"flow_id\":97409009787486,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":50312,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3444,\"start\":\"2026-01-24T13:47:25.664158+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-24T13:47:25Z","timestamp":1769262445,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":50318,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-01-24T13:47:25.836883+0000\",\"flow_id\":1475337597595262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.29\",\"src_port\":50318,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3444,\"start\":\"2026-01-24T13:47:25.765566+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"connectlayers.live","ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:47:37.126445Z","last_seen":"2026-01-24T13:47:37.126445Z","alert_count":32,"request_count":32,"received_data":17748420,"sent_data":14643,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-18T22:25:16.015191Z","alert_count":0,"request_count":2,"received_data":798867,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"connectlayers.live/27e4db45-5a67-4dad-a81c-f704b73aed07","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-28T03:11:04.333208Z","times_seen":734524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-28T03:07:41.407876Z","times_seen":236382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/1f86d6ba-b731-4648-8fdb-b5fbd6c5d8bf","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-06-18T09:20:21.342859Z","times_seen":4173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T03:21:14.04433Z","times_seen":408887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e834a77a8dafe1c234028ff6768633f","sha1":"2fb1864406b785064515581d20a7725440dae398","sha256":"afa1ca985c6f84e156d07f52f806e4afbbfc59e70ebf9ab9426f47297d766357","sha512":"28ac32f241b55d4d9a4e16ea6568523c61c549de26ee02a57229fef72c98e8f6d3143f1813f1f0a22c121fff2b3e8c5b83b11109e5bdb380f544fd18042a7104","ssdeep":"","tlshash":"2a11590aad12f08513b150bda23f960b7025583f53ac93f0b354c9f868f408b8226eb9","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.002785Z","last_seen":"2026-06-06T03:37:51.768046Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/index_1.html","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb66d27d22dc2a024dd6ca22c69e548d","sha1":"1ea24eb98cf5b582c1bc911f41e822ebbd9a5c99","sha256":"f66f8f936c7d56b91fab72f7b91c8704331347322e37e5399d049d5b5e506383","sha512":"e17b8b3e5a1737cba4781ec0b1c7bed8c84b4595de880b283a07da68902e74309bf9f27cfc7e5c3f55bfe6272ab030377c0e8e811c656553c8cca83f65d5ed9a","ssdeep":"96:S8FnZTn0Cc9c6CqtjsbDu+qr+qF6CqqfIvyuj+6QvxrEescSHVC2JtFPq7:NJc9c6Cqtjs/u+qr+86Cqqgvyuj+6Qv9","tlshash":"f9c17b6d9f92063758abb5bd8f9bb0802d2184275919ed303e4cd2029f4cd3997f5f94","size":6143,"data":"","first_seen":"2026-01-24T13:47:42.376728Z","last_seen":"2026-02-14T11:48:07.289907Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/8a9a8f6c-4093-4d70-b8f9-9f56e3d62fad","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eebe265c330cd7ae023d0b9745d548a6","sha1":"5200d6d2f82cbae7d984f3283ed5664df7a13879","sha256":"64a0b1a88473333c2999033a9de746d29ee1a91c03c591081499b67557c5f39e","sha512":"5f27fb6346ddd44264be556f250f6ee78307bad5018e802f7e4ba92d97177b4f041ca3df7fde6869b1c99dbb47412ef2710eb66d6547f951fd5e038d6cc18b52","ssdeep":"24576:kpfyMkw1EbVfAVsPdi2tgh7k2OYjQRjNtJIx+rYR:k90phLHNtiR","tlshash":"e53692c29859cc36dde90aac0b368460d0805a517b6ca6d5788cdef763aaf3607f1d73","size":4911804,"data":"","first_seen":"2026-01-24T13:47:42.380035Z","last_seen":"2026-02-14T11:48:07.294788Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T03:21:14.04433Z","times_seen":408887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb66d27d22dc2a024dd6ca22c69e548d","sha1":"1ea24eb98cf5b582c1bc911f41e822ebbd9a5c99","sha256":"f66f8f936c7d56b91fab72f7b91c8704331347322e37e5399d049d5b5e506383","sha512":"e17b8b3e5a1737cba4781ec0b1c7bed8c84b4595de880b283a07da68902e74309bf9f27cfc7e5c3f55bfe6272ab030377c0e8e811c656553c8cca83f65d5ed9a","ssdeep":"96:S8FnZTn0Cc9c6CqtjsbDu+qr+qF6CqqfIvyuj+6QvxrEescSHVC2JtFPq7:NJc9c6Cqtjs/u+qr+86Cqqgvyuj+6Qv9","tlshash":"f9c17b6d9f92063758abb5bd8f9bb0802d2184275919ed303e4cd2029f4cd3997f5f94","size":6143,"data":"","first_seen":"2026-01-24T13:47:42.376728Z","last_seen":"2026-02-14T11:48:07.289907Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"connectlayers.live/4a03f4b042fe0188d5d7bc1fb3cab5d1f13568f5.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:04.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /4a03f4b042fe0188d5d7bc1fb3cab5d1f13568f5.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:04 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-3c36d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7rGeoz5vv2tvounwb2fgue73%2FdLvcXyyDL9v4TCC0NIdb13kyQXbBUArlB%2FTEhK19bhifwNMNstZRDGR9xG2yo7nQy2AVTJcjOFWVFo29DcmQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb062b151ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a61fc43fb11891a021d85e81a75e77","sha1":"4a03f4b042fe0188d5d7bc1fb3cab5d1f13568f5","sha256":"1e0c12f83b99d4352e9fb08611db312d903d40bbdfb5a99c19ad35fee588051a","sha512":"b02d901c367a79009452ef84dec308c9711eefde0b5aeb6a6465fdce32365f4058f0ae4e9400aad635d3937359ff1f2a61f0579fe5f3baf46a78657417fca351","ssdeep":"768:tBQBsOcVVpb8613SciIqOBD9kWW1m/tqOFYQytGFZ/sHfFuuoggl3R4HjWhml11R:PVpb8q3SciIqOBD9kWGm/tqn","tlshash":"6b346d38c068f4d85229563da3a4dedf2403a75b6728ea4d4748a127fd0bc705a3d7be","first_seen":"2026-01-24T13:47:42.319671Z","last_seen":"2026-02-14T11:48:07.275842Z","times_seen":4,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/index_1.html","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0j7JUCRP%2BUotGCgJv%2BB1sttGXKtnMVZZoeewF4NrtVAlxSMLat7E2LbA%2By%2BCwQfZeiNQa5Kv1pGMpHqSxKWYFziIYQ8QV6Xtdf8vODgkPcumA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb387cc91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176363,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (304)","md5":"c3e73d5b501c0af99860f105cfa354d1","sha1":"a737ba184140827c85963a3db9df5de6cbdedfcd","sha256":"52eaf6a90c27875488aa12524e25d7090383e588e85be7e0942af676929a0977","sha512":"a14118172654c9d36080fdce7237b3b57f3fdd6b164ee3168f040baeb607192dbd5d120c0bd893058c0ea093906ec744a2fe94116abe41b1ba3843a41a39a005","ssdeep":"3072:ejcP8++yRRjCNSskWtCdqss2M0m7HpL6AFp/50spo:ejX++yR80m7HpL6Aa","tlshash":"b304739a56b311102a13a0682bfb1b4aa734e007d61bdd5c7fdd1348df4aad99e933cc","first_seen":"2026-01-24T13:47:42.324434Z","last_seen":"2026-01-24T13:47:42.324434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/a34f9d1faa5f3315-s.p.woff2","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /a34f9d1faa5f3315-s.p.woff2 HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/10f2c72fef884dcb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48556\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: \"6914c5d4-bdac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnpaKGmw5U683qd6%2BKvi0LoEncYbfFBJ5%2B64I%2Bo%2FEo87%2FijUuvRP2Fjcb9t0j4cn7xJrw8GqFvq%2FFzTvIXtxE4Rm%2Fz%2FvQQzkSxRrWVKnYc4RhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb38ecd71ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48556,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48556, version 1.0","md5":"d4fe31e6a2aebc06b8d6e558c9141119","sha1":"bcdc4f0b431d4c8065a83bb736c56ff6494d0091","sha256":"c88db2401bef7e1203e0933cc5525a0f81863bfd076756db12acea5596f089ec","sha512":"1cbe7641b8930163ed3ea348f573cad438b646ed64d60c1923e5b8664c3de9c2c21ba97994ec8d886f489e4d090772b010de72a1167547fb4f6a2d242d46aec1","ssdeep":"768:+rvWCaG0bvTIyNOporIvE+9OZduZ35LhKvXxYdBJaqyXNWLU2m/jG9EHmqGq55t:+ruCR0bvT386c6ZduZpFMXxQBJ82Q5tJ","tlshash":"7823025eb4b5c6e3fa05e60e86d990613909424f86b6dfc54f3741a038fcf912d3ea89","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T07:04:11.934296Z","times_seen":10213,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/10f2c72fef884dcb.css","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:20.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /10f2c72fef884dcb.css HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: W/\"6914c5d4-57ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sV%2Fmsn2W%2BbwEmg1e76lMD8Qnn3uLv8SHADP5cqCrnUlSB93HSnskmccyQvfb9lyPSo5eTrUkVuTo4dKfP8yEyKaeSA5gH9LTw7yQbC%2FJdZR%2Bvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb6b0e3f1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22511,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"e79041b29a7eb6ed410fff0e6cce0b98","sha1":"e0a4429724c3cf46b9fab67ee712b4c093dc15d3","sha256":"22621b44f23d47c181fd67dad076d95719ec77035d2bb2234d31db06bce5e187","sha512":"26bc4eaab3a7d94799543af5f364d08302bd75fbebc003508e54cb13d42ca6b7eff0bff84e1cb57019071a8460ef3f53a8b38a4797682b1a2cdd4030c7055dac","ssdeep":"192:CI6dgOl4PQy/yjNNDTEZwEPD6Ow7zmvT4xLFnKJFvdX2Keh2GdmmlGKFbiRht7dm:yCOF7DN3mv2FnCsWwr1UzD41tt","tlshash":"33a2db4064b04e342d276d6513ce9b19e61ee0d30cdeed6dbede004d8fc67a85ba6349","first_seen":"2026-01-24T13:47:42.328748Z","last_seen":"2026-02-14T11:48:07.260445Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/home.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /home.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-2bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO6N%2F8Uh2MIxp6gmIEME7ZnPDt7ifZzJzoNbgbGnXbdVmmbD8RKbmG%2Bjjm0GkQMS57Hc6obHrpumTeqQFNr0l8VZIPINan%2Fy8%2BisPN9ijKvrFw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb39dce51ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfdb8a793678758f9d6764c5ed1ba456","sha1":"52ba1b1513f90473bd14c1c0e2938e40b32168c6","sha256":"668e3b95c87a80357cbcffca48547cac1d70ce218cd1e6714b68a7a7ad44967b","sha512":"67d2833db6fc73bd94849d4c0b7958b5386e4bd21f8f36a2959d77f60334f0542272a559d675a11f654da3cf8f2c6fe7d5ebef87b3801f54660249f1ab51564c","ssdeep":"","tlshash":"a9019eeeb34c1decf5235710db647234117e107a268c9961883561f0b38e54d6b3fac4","first_seen":"2026-01-24T13:47:42.331854Z","last_seen":"2026-02-14T11:48:07.264903Z","times_seen":4,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/4a03f4b042fe0188d5d7bc1fb3cab5d1f13568f5.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:19.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /4a03f4b042fe0188d5d7bc1fb3cab5d1f13568f5.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:19 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 15\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6914c5d4-3c36d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yHzji1%2BItg6OWgzmWiF5ld5HJ6Y3BxvhOm1MQXRIO0rcQf7O25mbvsHpePAtMxcF3fWFPKRT5TYDFjkDNF500qBGFqLOyvo5qIHFKZ9Zz%2BskfA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb666e271ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a61fc43fb11891a021d85e81a75e77","sha1":"4a03f4b042fe0188d5d7bc1fb3cab5d1f13568f5","sha256":"1e0c12f83b99d4352e9fb08611db312d903d40bbdfb5a99c19ad35fee588051a","sha512":"b02d901c367a79009452ef84dec308c9711eefde0b5aeb6a6465fdce32365f4058f0ae4e9400aad635d3937359ff1f2a61f0579fe5f3baf46a78657417fca351","ssdeep":"768:tBQBsOcVVpb8613SciIqOBD9kWW1m/tqOFYQytGFZ/sHfFuuoggl3R4HjWhml11R:PVpb8q3SciIqOBD9kWGm/tqn","tlshash":"6b346d38c068f4d85229563da3a4dedf2403a75b6728ea4d4748a127fd0bc705a3d7be","first_seen":"2026-01-24T13:47:42.319671Z","last_seen":"2026-02-14T11:48:07.275842Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/10f2c72fef884dcb.css","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:12.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /10f2c72fef884dcb.css HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: W/\"6914c5d4-57ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 8\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsEW%2B2%2F2ihnXw%2BVLdYW1A9QRCI4O5wSXqz7bTQOVv1Ho0uwMe%2Bb534cki6DW28ulSv0MbHja8ziPWfatKe7qaGL%2BStuUdvHiHQ%2Fnm1z7QMliqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb3c5d151ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22511,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"e79041b29a7eb6ed410fff0e6cce0b98","sha1":"e0a4429724c3cf46b9fab67ee712b4c093dc15d3","sha256":"22621b44f23d47c181fd67dad076d95719ec77035d2bb2234d31db06bce5e187","sha512":"26bc4eaab3a7d94799543af5f364d08302bd75fbebc003508e54cb13d42ca6b7eff0bff84e1cb57019071a8460ef3f53a8b38a4797682b1a2cdd4030c7055dac","ssdeep":"192:CI6dgOl4PQy/yjNNDTEZwEPD6Ow7zmvT4xLFnKJFvdX2Keh2GdmmlGKFbiRht7dm:yCOF7DN3mv2FnCsWwr1UzD41tt","tlshash":"33a2db4064b04e342d276d6513ce9b19e61ee0d30cdeed6dbede004d8fc67a85ba6349","first_seen":"2026-01-24T13:47:42.328748Z","last_seen":"2026-02-14T11:48:07.260445Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:12.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 24 Jan 2026 14:35:12 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfHKj2REJXbbGcivRuIV8sfs17pTIRpC6a5J%2BsnfAVThfK00QzlPy7loi6FDqZku3%2FGy0cIdBqjs1ikkWGUCSSAKbB5wNWdbbC2AtI95du1YlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncf-ray: 9c2ffb3ced1f1ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T03:21:14.04433Z","times_seen":408887,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/10f2c72fef884dcb.css","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:04.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /10f2c72fef884dcb.css HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:04 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: W/\"6914c5d4-57ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2Fq%2B3B4DJN7lD6YO8eyUqvMD6laNqzjJEp6dPNpQF3c6pBCJHLU9ZWuXGtS3ANCB3Baax1DlT21ifkdP0fH%2B%2FVCyT8jru%2FpfOPXgjMjU9HL7Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb061b121ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22511,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"e79041b29a7eb6ed410fff0e6cce0b98","sha1":"e0a4429724c3cf46b9fab67ee712b4c093dc15d3","sha256":"22621b44f23d47c181fd67dad076d95719ec77035d2bb2234d31db06bce5e187","sha512":"26bc4eaab3a7d94799543af5f364d08302bd75fbebc003508e54cb13d42ca6b7eff0bff84e1cb57019071a8460ef3f53a8b38a4797682b1a2cdd4030c7055dac","ssdeep":"192:CI6dgOl4PQy/yjNNDTEZwEPD6Ow7zmvT4xLFnKJFvdX2Keh2GdmmlGKFbiRht7dm:yCOF7DN3mv2FnCsWwr1UzD41tt","tlshash":"33a2db4064b04e342d276d6513ce9b19e61ee0d30cdeed6dbede004d8fc67a85ba6349","first_seen":"2026-01-24T13:47:42.328748Z","last_seen":"2026-02-14T11:48:07.260445Z","times_seen":4,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/ru.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /ru.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-109\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdvYe%2FLSTW6VzmPvwHqNRINTiWsM8T94EY67%2BkcZv1CQ8g1%2Bnopcj6I6NWBdG27KGOoYhT81XIpltTIRzONxFMploYkO7Zq6rihtUgDRX5g%2B%2BA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38ccd11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a8b3a7d8204983d246e6edbcbe21413","sha1":"c5319da4e5bb4186ead28b4c23f998a5085539f2","sha256":"a522f2a2c90b45c61d0ea15898c102061eb7d72195e1ede1318734979c6c538b","sha512":"bd80e2edb8e8e8117027ea15919a7565f9055860ed770bdb7ef2c8db7b9f6ff0f3ef3c5c8dc8bcc5567dbc7508adde3186222730c26ad6a0af4f1844a4f68086","ssdeep":"","tlshash":"f9d05e61a259b80cd6809f2d0bbce49a232ff01f9355016cedd43621512a99bac3833f","first_seen":"2023-04-18T19:25:33Z","last_seen":"2026-07-26T03:06:30.812895Z","times_seen":213,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:20.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9c2ffb6c3e180b41-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1017245\r\nexpires: Thu, 14 Jan 2027 13:47:20 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A6qTm5FNM0tJk0AlFGb9FnzwWR4rS19fOdMH%2FOJ9W7D9VQ3nDBb42AU1dDsx%2F41uYzO6AwB%2BYbLEqL8H%2B%2F84bOCJNIIPgffLwTf%2FD64Si2pkCJDgrTlyv9G86bYJKAuqr75Cli%2B2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-07-15T21:03:46.662531Z","times_seen":8481,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:47:03.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gOc8%2FpPajqrj8MxKDy4gwnNWYycn9kYeBmRgcpJvV63vP6euNVNhgt1UlqiOe%2Fa5UyoNOctZwLugGLTNfFneHkguG%2F6Oo5gW3f%2B%2Fg%2F5NAeHJXQ%3D%3D\"}]}\r\nage: 246373\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ffb03684835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176363,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (304)","md5":"9b431bb392740602b73d004f30a0a629","sha1":"6979d9c0c98df8f401b55d634a8996df9ec1ebc2","sha256":"33928c4154c292e37b278c13c39559d317ea5bca2237c9007816cb0eeda6b7ee","sha512":"979482c1e11f21db003a40f7d55da7edfb742fc9667833824d6d059dbcddd4a611c8ca2615009fd703628400b787be705c45267e413d205252e2eebd2a548f6d","ssdeep":"3072:ejcP8++yRRjCNSskWtCdqss2M0m7HpL6AFP/50spo:ejX++yR80m7HpL6AM","tlshash":"a804739a56b311102a13a0682bfb1b4aa734e007d61bdd5c7fdd1348df4aad99e933cc","first_seen":"2026-01-24T13:47:42.339577Z","last_seen":"2026-01-24T13:47:42.339577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":114,"dns":81,"connect":1,"send":0,"wait":17,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/zh.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /zh.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-24b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QDuP90eXpDAwYOxshxzA9n1KsUIBtkc5SfRYi9YKTWr6Mv4ihC68gsx%2FS2sMgBbgUoY%2FJ6RCUbkIT7LAKGoJRToxGFo9BvUBpIyQR6R751%2Bvg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38bcce1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":587,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"001f6f277d4bdf6fa0f22d6510acb741","sha1":"eb608ef3ca74b7092f9c9a40c564c2f6f8f4d8e7","sha256":"df9b225e6f1e972aa3b4de20964dc5c14cfd0983b0cd5b40b8cd3e426f69c465","sha512":"2877658ad67e05bcf85b1344f2fa91426775c6e38024072f762edd03a2f9da3c0be652336a22c44cf9f896a85fae3fc1402c3dcd760d22475f85deaadb6aa74b","ssdeep":"","tlshash":"4bf02884a81900088b0897e6c3fc6dd5841ee09751c748bbf3213fb7817559b5acc305","first_seen":"2024-08-31T07:58:21Z","last_seen":"2026-07-21T21:26:46.480924Z","times_seen":49,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/de.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /de.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-158\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZuKpf%2FOlsSjZD6teTnBiaYRlQng1wk7XzbSeth9s6z49lGHSwXgKARyT1nLbcArDCUelhobkp7RqqdpYwHUKuPQpC5LtGPY%2F47gKN2Frd6rhSw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38bccf1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc4763d5816757746a5b4671732d8c44","sha1":"e8dc5204849d526ccdc7783437710837fdd69e4d","sha256":"50e889d3868e1663ea99ba480668b1f39006bc4b5ae80d7fc9a403c56172af2f","sha512":"a57474dcf462e8ab82a7ddecd54a74bedcd13c1da134a3b251ffea0907e1105362b2be07ec4aa82633a2609eb7491d117fe9f1025de229299a851f4498aa2971","ssdeep":"","tlshash":"8ae04f68a1ed2618ca0047252abab8eb53077187d3764298e9c1353b205a4dbec705be","first_seen":"2026-01-24T13:47:42.345355Z","last_seen":"2026-02-14T11:48:07.284055Z","times_seen":4,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/tr.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /tr.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-144\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRsLsmMoTUDYpNm2DVvvicp%2FnsyNXXkjKb363K1IP9Z3nFjEAuRrmXegB4kIwwPGw4kPOZJ0ryIf7sh2cCSOXfCkTYLQ%2B3xQa2KSbBZHbnK9xw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38ccd01ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"121e8386d3410db3f06caeae99287769","sha1":"09edc7fca05aa88c1b316f1d3f97c587cdec5adb","sha256":"5a47e932cdb371d9708d8c9a209d3acfd006cdd3ee7dd38ae44df6180e170e90","sha512":"a33d032ac0810ea3f1c2819dbeeaa9cffe26b34bd2afcf9bd859986aeab25e68908a1763b07ec1906fc5a9b28b6a96eefd33488a5119fc812510995fdf9b3e54","ssdeep":"","tlshash":"14e07d79617c105cf516c74017bc3ac6475d30eed1cb20f0c848497d1509853af0b58c","first_seen":"2023-06-18T23:58:31Z","last_seen":"2026-07-26T03:06:30.813686Z","times_seen":142,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/nl.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /nl.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-df\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRMI0PBi0fCbupYeS7CVsYYeC0EDdvmlKEM71HmWfdTy5uVeiObU4dn9lNzDxReEHVOUzXkJfMYhwJf5NnkGrKWeqHgIwf0Cqpy%2Fx%2FWTOyEdSg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38ccd21ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e53fc83f569b904b5b883c87a37b5607","sha1":"e9d6d9f2ffe57c6a8109651ecccb442e14e9a2fd","sha256":"9c2a624a9ca5a82940d8902a7b818230d7bc2efde991837d6f78bc78c1b27110","sha512":"0008b2922f34d6fecc674c352f54fd2cfa152fe68831553f421a295078b33e4fcaee0e5e3d2e5fc56df2d591b990fb370d1448296ddd95597abd730084acd189","ssdeep":"","tlshash":"dbd0a9a8828d6d0cc680afe20a24ec9a261be00fc7860144da80731a201a8a6bc3153e","first_seen":"2023-05-10T09:47:57Z","last_seen":"2026-07-27T20:50:52.813974Z","times_seen":196,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/eth-hero.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /eth-hero.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-2fb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t58GfeYrDiC8Z8dvafHCg5JHsSEAc4T4TWlkIqntalug9chOabPWkai9D6bFNNnhBdKm6xZDd5ve3vLhWgKpgs7Yg51w1C5bzcgqPA31wSw93A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb39ace11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74c28a30102f8b00b249e44e460059c3","sha1":"b995adf271297b25a506ef2f3fea4259c3a75911","sha256":"3446fb7d118f26f5d9b47f96033cb54822a268d80478007ed83ceb40763c3545","sha512":"cb398356a52beaa9139eefdefd0f45adf605bf830c50bde4c4b644a155e10e337e16783e9e86fcff2a9d21ad5ba13dbea4cfef530ae5edd30ebcb2678075ed9a","ssdeep":"","tlshash":"64016db1f72a016da5408a152b5d743923a675ca6038004e68d025eff4536cf4c783bb","first_seen":"2026-01-24T13:47:42.34991Z","last_seen":"2026-02-14T11:48:07.274818Z","times_seen":4,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/star.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /star.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-34c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2enVBbvnrriDu%2Bs72SEBWolJXJvKD%2BItIGdsujYT2Fvx%2FJQ66CeJrzpHyMANjN6QoozUa94lhHs%2B%2BzwV3yKfhLIFXRh4fxR%2FK4BfQYpL5YWVUw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb39dce61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":844,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73b32739a8deb14f9957fb3a0aacf41f","sha1":"7f1b613d8e4daa5a4e104ddeebcc9c2c0bbe4b7f","sha256":"9c60458bcccb60f29900088289b669f3b853e1daa5324570baf9e065c3144c3b","sha512":"2253953056e349038e0242f748f3c3b6ed1ee6830274fd00b6f0222e00eb3ae4f78cfbc5598ac63449c5b7c44cb6c07436c34eee845356821250e6480df00b50","ssdeep":"","tlshash":"8f01e3fee3d4e5e4d506cf38871ae37139d750f92b4a09e98215207550400df5ea3c48","first_seen":"2026-01-24T13:47:42.351806Z","last_seen":"2026-02-14T11:48:07.271421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/en.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /en.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-1dd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULdOQcHZG3IgzrlisX%2FWoIQVggDQlER9oqWlVhps%2BVh0V1ko2f980G8VmdrWC4MA7yNXmtwWW0arvGlN85eFedU4FjuwOLkWt%2BrTAfYjfdYgzQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb389ccc1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f45a5ae5ad1c7912cac273e88bd3786b","sha1":"18b6a6db1e9d736dbf26182edbe63b299134fd7c","sha256":"b93bb15033d6c2219f290121d40c0a741765bd4b077ebcf5a5b0d917ff725a28","sha512":"b46d9eaae50fc85eb260ba64c3257f3ca749744fa7f312f77b3a58185b37b202c02917d177d2608e642f9d3587061ba1f566598ab44b4ece7ead535d336dcb46","ssdeep":"","tlshash":"08f0274523e95868db30c3009f78b2e4053f2cf8a6442060a5812a301a1866b2c7baec","first_seen":"2024-03-29T17:16:15Z","last_seen":"2026-07-22T11:58:24.889244Z","times_seen":279,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/graph.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /graph.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-4dc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lU7xV56dzarjV%2BdgTYDXM9qmOzqK5XFi8xHncHHPN81xjtaPWeUXX6MpKo4%2B1a9cjUqDWaWCBDVAEFlyydt7tGkX1lQNZlxmyoWa2GW%2BMpv9GQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38ccd31ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a987c91c1b3e1071f8d36ff208ab7944","sha1":"c7e81f317c7d42f0be4e242ce613dfa422e78dfa","sha256":"9f2895a8926bbec0aefaf562c9bf70ec448202780bfb0112d4793c14d10a17fb","sha512":"6411edcdb1b79e7d517c3957b1c71d6696912ec9e96a9eb03a85bc92f7c6471a0ccd1e30b9eafdddb09121ffca712ca5764bf84e757da4b4a08425b20bb7c406","ssdeep":"","tlshash":"e321329ea3ddcd17e588c089fb51e064261fe196d2c093e1d050bf1f50189d3380f9d4","first_seen":"2026-01-24T13:47:42.353621Z","last_seen":"2026-02-14T11:48:07.278464Z","times_seen":4,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:20.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 24 Jan 2026 14:35:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rZB3KM0ehXfeUEpIr8mz4%2Bk4iZbkxCdjlSmCRIASlNF7ZfVM9A7dO%2FHTfAL6kKbhHFmyLLjzQHczZZfvDH3NbTRUTCMallw7u8d%2BanFU3JDssg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:20 GMT\r\ncf-ray: 9c2ffb6b3e431ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T03:21:14.04433Z","times_seen":408887,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/favicon.ico","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:05.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:05 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-6c1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dM%2Bq%2Bn8NoCIdaay48f4ecMdcsLrOrAg6Ubdm76Ti%2FxoWQIY99GmF6NJaa%2FwwQoSSgwCL3kNSVrVRJfRb0HjiCl6oRoZdGNDqshVlMATIfrfdA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c2ffb0f9b831ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c787e2023007af68fecd7930e9567179","sha1":"cedd3da2294e49db7965d9e05e16c84e35835a37","sha256":"1680e16111dc84dea0aa091fa47a6f88904ba837771eb420c57141830ba17bee","sha512":"4ef0d0c7e8e7dadee695a6830f16b43e4277e005a4e1306e9302d96bb4e4ffb599348de4d6e84191be754511c41b35bab063c3eccee874e26e8fb9dc97612996","ssdeep":"","tlshash":"dd311d1a9054388e58fe1fd1f6e71315f5641fc3e4e274045d1ad609f5ba22d12c7021","first_seen":"2023-05-24T11:50:41Z","last_seen":"2026-03-03T02:31:23.297949Z","times_seen":20,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/floki-logo.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /floki-logo.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-23cd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brVMgom8iK%2FWjS4GrxRn16cWreFm9jX8CT%2Bgzsuh1nIQJFCgfnbUWOKMZtpMmPGMl8XTbMLU1bD3Ky%2Fe1xQp6HUFegZgOv%2B2okcg%2BmW1BrCW9Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb395cde1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bbd9b4bbfd513d0d26704bec0792821","sha1":"760b741ac3ad627f966b0931e31b113ac39da218","sha256":"26700bc4a229314ae05f092406b83c85a38efc96031e0aa0287d7261a469e6ae","sha512":"962b0efcaf808a6fea018bbf71f43189aacd38739ea929ea13d5813df679561e6515bd63cb7a375bf109dc94a4264be73c5f2f2864dd92425f24c588c6787a90","ssdeep":"192:L2ceO3aYh/4BQe0BLQFIXIleIHXuN03Tb6j86jdXI39e5nzWHga:L2E3aYh/4y3YleIHXuj/pYodzega","tlshash":"94124c0b0309ebeaee6d015c9e29149975d4d9c7e070f1c0bb6b2c16d49d8e4bd8c7d9","first_seen":"2025-06-17T13:04:24.640236Z","last_seen":"2026-03-03T02:31:23.266952Z","times_seen":18,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:19.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:47:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9c2ffb69fac7783d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4371408\r\nexpires: Thu, 14 Jan 2027 13:47:20 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vdIx0aMsNHIC26M5E%2FtKxtrmVseIuHwMVg0OkN%2FmIupefULB9HecSdZtrJbzhYauBxu9tfl069k8Ndoc8%2BZDfL1jxX8gncdsJFKz2%2BEyXQLZ8SIvqbesbV%2FwVsmjqwUZc4EEvAqP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-27T15:59:00.355812Z","times_seen":31772,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":12,"dns":2,"connect":1,"send":0,"wait":10,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/minikit-4.0.7.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:04.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /minikit-4.0.7.js HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:04 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: W/\"6914c5d4-542be1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Mnj7dtpG3sKHBdqdxr%2FdkT9MPpgw1uQwRTuOVNd50LX441uqu04zGIUNUI7VN0yPg1fjtAOos1qpgld3UWAV9AwQSeFQf2edGwKvh25hJsFXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb062b131ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5516257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"634265ba0feb4cbf9eadc1e2d9fe0c84","sha1":"a87afabe933a831935277937531cfbb85ec31ba7","sha256":"697bbfcbc67f58cb1dd607a6d691a841b71795670cc4adada929ce0654ffc370","sha512":"fde7d1028929e3aeefd98f8702b6eeba1ee803d45d4ea1c95a5091cad016e5ba8b08ca7e323a8ef8b275cb697c1ee5111029ebecac4123e43341dff3f989b9d3","ssdeep":"24576:qyKPA+BH3oYcfrmI+36B/grJUq6QQt091TcNAYXLPHoQAhTec7v:qyKP7BHYN/etzFSuYXLvMj7v","tlshash":"2f2523f8c1e9c0a54d8512d03ba328e87985ecfcc69edb69598de8f16162fe0c6584cc","first_seen":"2026-01-24T13:47:42.357521Z","last_seen":"2026-02-14T11:48:07.264002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":600,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/goo.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /goo.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-2919\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q6Es9%2FDfsQw7d3UK9x1U21Uw9%2FICUaAIl8IfH4kxDg628q4MBedJscSw9j5HrCgtp%2BIVpO9CIaApA16vTpmQm1FHuB4gixRRq5S7WL67%2F24Tgw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb38dcd61ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10521,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cd86adf82f026843fcd96fad90c1637","sha1":"237a7563b9718a0480891f7492cee13a208ff993","sha256":"9212921d8b07cef5cc52db9182ea1f9aa7febfd70070fa1ad6c50eba65ee3664","sha512":"655ca2e8f5348dafca4eca3a03ceab772e2d5cfe05250c4b7b2315a4c1256f78efac1e9f5a71d23a8a0607fc208c1d12fae408732b57a34844dec724eca96c73","ssdeep":"192:zIoa7kH0CZY+2UR8Hc0bQeRS4kKFJWOFLS9mzziOEhEFoQTiqz0n43f7G:m7kHpx2UR88neJLRoOtz04vS","tlshash":"e322c6ddab345ce8cecc82db7f20189c2e2b9137aa519964c06c8fda2cd5ddc8d55a4c","first_seen":"2026-01-24T13:47:42.358812Z","last_seen":"2026-02-14T11:48:07.270561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/arrow-black.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /arrow-black.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-e6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jSJUVAe5GgukS6LDlR1vj0tlrGfbmmfUbknxxNCxqEEOiS7TE2rFh6MUYT770fGbIlJJ84623mOVUV8nX%2FvjEeksWwABfyRXTdiXaESKcdUnAg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb399cdf1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14ee4db2f70c6f4787691d66d7a9964c","sha1":"3ef1e800fed6ba3880de2d15fa85cc925f5c3a7d","sha256":"7930e67064d8f9787b9ec022ad5bb10b00a7792832f8bc98c2d7008071731841","sha512":"c520c649a380fa15c208a72b21011b92a1fb598400c98be346c4c968e4577f738309893ae8e3da16ffd5d92a0fad758cdb1547f418936ea6ed691a50fc61b78c","ssdeep":"","tlshash":"59d0a77963dc4d2cf4254d20d325b13584a71143458c2168c4312034a54569ebc375ec","first_seen":"2026-01-24T13:47:42.360148Z","last_seen":"2026-02-14T11:48:07.273997Z","times_seen":4,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/bnb-hero.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /bnb-hero.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-549\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2FT05H4T4DVgmW%2Bu9O3mH1Ajs95asra%2BT4LsCw9Hrg8GvlFINs8Cm0nu%2Bc2RhDsV9%2FG3tuHkvIzw8jx1J0GNRN6fu5p9y1OP0kdrihgpXiQJKw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb39cce41ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66c2af4865f8bea8bc7eafa5aa3afc20","sha1":"51a9de82c7b2adcb550b7768b831dd79778c0dc1","sha256":"5511d44df9f9cb7db67a2e05b15dbb437a2e5ff758fd1496adb461cfe4d3a97a","sha512":"998d87f66d3a8a979632c066b9c3da0291645ffd6b2e36fc938e8bbaa36e8259efa6d60601dd0cb07e92afa6ab49bbdb2a1ef828951f3935b820d61134111359","ssdeep":"","tlshash":"59210b72666d7298e24e2fb9250698b9613877ed732481d807ec0d036c9119e0e3c9c6","first_seen":"2026-01-24T13:47:42.361986Z","last_seen":"2026-02-14T11:48:07.282288Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/wallet.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /wallet.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-1ec\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4epPhylAfhtS86fPYGNc3JOyxbWJdHJy7%2BEn3RoGZsRcORfKnxCW1LNViy%2Biccc04LIqygy3%2B%2BC1NxHx5Im1qAqmx7UBdoR9Wtl37LxgXx%2BBw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb3a0ce81ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"304566e6595d32b12993e80e63c77dff","sha1":"83edf25096858df69a332e5fe260a4b091fe40d5","sha256":"ef53ed50aa1cc400229389654c0e8376618964aabcdfeb6e42560c969b707f9a","sha512":"aeb639599bd263cd508a2ca6bf5b184b9d824ef7864a826862905e002742a00b50b87b26080a727513d914716b2d315e42806b4de49c3cede6cbe8741214cf14","ssdeep":"","tlshash":"a1f0e25db32c4d3cb6220798d319727410fb21fa16082ab0dd7124b8b205a6e3b7f5e8","first_seen":"2026-01-24T13:47:42.363447Z","last_seen":"2026-02-14T11:48:07.265814Z","times_seen":4,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/flash.svg","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:12.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /flash.svg HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6914c5d4-22c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZUGn3kiayDzZVhRGlRVCrtuk8LQJsq5c1wKvRIvha%2FBC8KQy0iyGLQ5JA6Cl9EOWKbln%2BqaitORfqP2MJkNOQYAltunEBqOPS01EQCBLA54cQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb3a0ce91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b64e707a4b2089ffd2b7c1aab2ed337","sha1":"a367f6a186e8401fc98c3e0914697c1375d233c5","sha256":"49f18f23f96ab6c728018b52b2327f5cd1b1cc55cc5b69159d0fba15d02a46ab","sha512":"725fff2ab0978e58d5f0b5ab0894eb9e7d7b1adceb8ee3007b71178321608326fdd33d8d751c793b6a5abc98daae2e70dd571b64ee532e22ffe4e8be2930392d","ssdeep":"","tlshash":"65f0819ae365a8b45012cb14f21b266a313b616a77c8c0c9c47508a0728115d96ae595","first_seen":"2026-01-24T13:47:42.365397Z","last_seen":"2026-02-14T11:48:07.251168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/index_1.html","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:19.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:19 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 7\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tm2Ra26J6hwR1pIoX%2BPRoUoVtqnD03LvjyyzsOkjn9pRlSabTgwGeOLuhX2QCB7cTr9QS2ddJHbpnXqItOJC%2BxHM9B4Jqa77vAOfdYjQdWczQg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ffb665e261ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176363,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (304)","md5":"bc27bcabb9e26490f8bb47e7230e37ad","sha1":"68baa27374ecc859c0eaafd437324084e74851cf","sha256":"9b1fe6f6564a4c3904302bb2ffe0d4ebb4141ac99a3ed16fd9a287682de641bc","sha512":"3bc3f936323e53f50d6daf092972b6d7efec34f59e57a967ddc82127a4f6dc4308385e8ee8637ddba6b97075d76f6422356ff03b407a336e757a6080c1a213cb","ssdeep":"3072:ejcP8++yRRjCNSskWtCdqss2M0m7HpL6AFr/50spo:ejX++yR80m7HpL6AQ","tlshash":"e704739a56b311102a13a0682bfb1b4aa734e007d61bdd5c7fdd1348df4aad99e933cc","first_seen":"2026-01-24T13:47:42.367146Z","last_seen":"2026-01-24T13:47:42.367146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/minikit-4.0.7.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:20.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /minikit-4.0.7.js HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:20 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: W/\"6914c5d4-542be1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 15\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjhWW9i4i0fwj6zTrWhOcA9Vn3Eg%2Fyb1NxYsQ5Bup1RnSEsl7WqV8ynLkOFJfDDi%2BhIH%2BY6IhCWIiWBy2Sd3UyFk%2BtxE%2BGvR398TmYyAM4wAaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb6b2e421ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5516257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"634265ba0feb4cbf9eadc1e2d9fe0c84","sha1":"a87afabe933a831935277937531cfbb85ec31ba7","sha256":"697bbfcbc67f58cb1dd607a6d691a841b71795670cc4adada929ce0654ffc370","sha512":"fde7d1028929e3aeefd98f8702b6eeba1ee803d45d4ea1c95a5091cad016e5ba8b08ca7e323a8ef8b275cb697c1ee5111029ebecac4123e43341dff3f989b9d3","ssdeep":"24576:qyKPA+BH3oYcfrmI+36B/grJUq6QQt091TcNAYXLPHoQAhTec7v:qyKP7BHYN/etzFSuYXLvMj7v","tlshash":"2f2523f8c1e9c0a54d8512d03ba328e87985ecfcc69edb69598de8f16162fe0c6584cc","first_seen":"2026-01-24T13:47:42.357521Z","last_seen":"2026-02-14T11:48:07.264002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/","date":"2026-01-24T13:47:04.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 24 Jan 2026 14:35:04 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6BNSmpkdlbpOhHQiT2qxZC5KX2f%2BU61C9%2Fr%2BaHLXLHIHmW9NRXc28kGPoTk2%2B%2FvW09Y0Z2I7nJs2yPkOPMFCJnqfNObXjud0y5LQ7xG9tkm3rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:04 GMT\r\ncf-ray: 9c2ffb062b141ae6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-28T03:21:14.04433Z","times_seen":408887,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connectlayers.live/minikit-4.0.7.js","fqdn":"connectlayers.live","domain":"connectlayers.live","tld":"live"},"ip":{"addr":"104.21.13.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connectlayers.live/index_1.html","date":"2026-01-24T13:47:12.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connectlayers.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 17:35:48 GMT","end":"Fri, 10 Apr 2026 18:33:12 GMT"},"fingerprint":{"sha1":"0C:1A:49:CB:D4:58:31:45:59:E4:B3:F7:73:CD:75:A1:DD:24:9E:CF","sha256":"5A:CF:0E:67:95:74:C4:F0:BA:0B:53:90:EF:B1:2D:EF:30:20:8D:E0:91:5E:1E:41:A3:CC:F1:2C:EA:08:DD:3D"}}},"request":{"raw":"GET /minikit-4.0.7.js HTTP/1.1\r\nHost: connectlayers.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connectlayers.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:47:12 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 12 Nov 2025 17:37:24 GMT\r\netag: W/\"6914c5d4-542be1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 8\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP3ARsqkIViWf7xSBGo1UXRHAg2RfWsac7hUoyAnfJIDn76bm9h6TriJqoZ1lTET6ZofyXRXyQZHLJXC%2F96Skiq2EDt5obZlGSq8FFSNHwY9yQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ffb3cbd181ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5516257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"634265ba0feb4cbf9eadc1e2d9fe0c84","sha1":"a87afabe933a831935277937531cfbb85ec31ba7","sha256":"697bbfcbc67f58cb1dd607a6d691a841b71795670cc4adada929ce0654ffc370","sha512":"fde7d1028929e3aeefd98f8702b6eeba1ee803d45d4ea1c95a5091cad016e5ba8b08ca7e323a8ef8b275cb697c1ee5111029ebecac4123e43341dff3f989b9d3","ssdeep":"24576:qyKPA+BH3oYcfrmI+36B/grJUq6QQt091TcNAYXLPHoQAhTec7v:qyKP7BHYN/etzFSuYXLvMj7v","tlshash":"2f2523f8c1e9c0a54d8512d03ba328e87985ecfcc69edb69598de8f16162fe0c6584cc","first_seen":"2026-01-24T13:47:42.357521Z","last_seen":"2026-02-14T11:48:07.264002Z","times_seen":4,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"connectlayers.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}