{"report_id":"f4eb60bd-c2db-4030-bf61-e61702daa7b6","version":0,"status":"done","tags":[],"date":"2026-08-02T00:23:00Z","url":{"schema":"http","addr":"ag88oa.123111.cyou","fqdn":"ag88oa.123111.cyou","domain":"123111.cyou","tld":"cyou"},"ip":{"addr":"38.190.250.187","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"title":"Cheap. Leading. Fast","dom":{"size":160688,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51031)","md5":"1dd87a59a443bef94f4a26b4092b8726","sha1":"266265e9af3c406aed2a73d1ff6058c71bb0f1b7","sha256":"ad745ebddfb3b0b57919791ce288fb9817da54951d9c665142e2b467fa5b019a","sha512":"f31fe1663675b3355d259fe6061709ef63424df8e5970fdf16cab6270fae0819a822b15f2a83d730a132c9038ed0fe0c45fe18a2a2bb8e2788282f6969710d2d","ssdeep":"1536:ExmoOZI7RqsqLB8ANd8P8PcMr/MuwWzZ0uFE++6PY/Xy8ksKhY6l:6r2l","tlshash":"1cf3f8f5a3e8a1e8e40bc3f8e672a476312b30ff7f56c658719c1a94eb6109d495dc80","dom_hash":"domhashcfec41b8ac0c0ae89703a9f54cfbb622","first_seen":"2026-08-02T00:23:07.989241Z","last_seen":"2026-08-02T03:13:58.164845Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ag88oa.123111.cyou","fqdn":"ag88oa.123111.cyou","domain":"123111.cyou","tld":"cyou"},"ip":{"addr":"38.190.250.187","port":0,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-06T00:23:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"ag88oa.123111.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"ag88oa.123111.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"ag88oa.123111.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ag88oa.123111.cyou","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-05-15","domain_rank":0,"first_seen":"2026-08-02T00:23:02.847052Z","last_seen":"2026-08-02T00:23:02.847052Z","alert_count":6,"request_count":2,"received_data":244,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-07-30T05:32:32.282002Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.2026ee.shop","ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-02T00:23:02.866041Z","last_seen":"2026-08-02T00:23:02.866041Z","alert_count":27,"request_count":9,"received_data":161756,"sent_data":4982,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":1,"received_data":15013,"sent_data":582,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.2026ee.shop","ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-02T00:23:02.851493Z","last_seen":"2026-08-02T00:23:02.851493Z","alert_count":112,"request_count":28,"received_data":3653992,"sent_data":13103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.2026ee.shop/assets/useHome-4d3a6cf0.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6203dda613615b909ce7afe993f8c009","sha1":"efe8797ee938f9e13dac63cfd1289c6c1cae96f0","sha256":"f673c745e685b99bc22c4430231716f9066c3d819eec409d0e60b7145d2a3be7","sha512":"5a5161ac49fecbb6ba33cab0268330fff6c45d898c1969ac9a2a9744966162cc8474bdefd7562c155f1a2b5406dd7da89d7813ff0fd770ddcf0ae48da1d055a9","ssdeep":"","tlshash":"1e71411476a680b683f441f15eda1222a03fda027c4381deb2bb09664977fd9b5dce39","size":3754,"data":"","first_seen":"2026-08-02T00:23:08.027142Z","last_seen":"2026-08-02T03:13:58.18341Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/ContainerForm-86d3935b.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"056a71ec32511e9901a44ceaa120aa7c","sha1":"e55df7893efbfc6b6585a53c8a952fb543f5fd4b","sha256":"a0cfb6a65f794a902e2c9e00b612136e4dc3f7738ba27f4437b9f08e22ba6679","sha512":"2a8881b03dba11fc3d50f584462fa81bc8d51f4c4075e412212adadfeece2c6ba11023fee0bc810b12a45c54d9daeb090e1041b0861d710bc123cd6f9d40c5d4","ssdeep":"","tlshash":"6ed023086c00f273a075059c77a7143b0b253d6777b856d650558457571547fe34ff54","size":225,"data":"","first_seen":"2026-08-02T00:23:08.032504Z","last_seen":"2026-08-02T03:13:58.178921Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-08-11T19:56:20.388534Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-08-11T19:56:20.39131Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-08-11T19:56:20.392307Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-08-11T19:56:20.393246Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-08-11T19:56:20.394104Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-08-11T19:56:20.396101Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/Login-91911cfa.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"085f018c7c58b222602dbdd182512fbb","sha1":"deac04b22b93d857e11c1e3461c0294063b043e3","sha256":"5f4cf05819af4f9fb81f694ed5ab0d0b34f66aad9592b682fefb96d2849dad37","sha512":"2283fd572bef804a53da6c72b7d1122b10e0ad07b55644706a316969f6e05fadeb13ae8ddd7ac0140f42e590371a9312539724c08770152ced3e236abee48d2d","ssdeep":"96:S8EPx0eg6LtfpNuSRzBbJnu+uZ8WYOith+aQ41RjXfA8T+HgQtDlitXJ/Z:bEm6L9pNlRzBbJu+6xYnt9BjfUDwJx","tlshash":"6ed1a659d429cbbae07b8565750a4810b20e1fafc340c7b2b2fc4a113f95df48b29729","size":6502,"data":"","first_seen":"2026-08-02T00:23:08.044944Z","last_seen":"2026-08-02T03:13:58.185265Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-fe075ad6.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7a7a8056a028b2a793178d0251768df","sha1":"7acb2be712e55e1b6f6933bf06265cb60d8a9dfd","sha256":"b6ae01a104f6cb19527a2975797d0443e3160217de104088cd0e9dd9e6710329","sha512":"1611c450ca7e16f9264722ae8329f2128242d914f2f93051222a4b4304d407dc48f801afd1a81a44260eb3c4721e22aba0e19db9a30a78298bbea8c7c756f8cc","ssdeep":"","tlshash":"77f020049c01c6bc0cef010a2215212452042a2fc31468f895cf623c479e0b1b46971c","size":557,"data":"","first_seen":"2026-08-02T00:23:08.06019Z","last_seen":"2026-08-02T03:13:58.168905Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/phoneCode-dd4884b8.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a75170b1e0eeb35731481bb8575519ac","sha1":"dbd7730f21df29d66e02ef79b0583e248c5e9031","sha256":"3cf36d246507ccc200645e351a1bcc55d11c35d41ceaeca70b42a1f2f178a500","sha512":"d01a521d84fd41c801c3bb99af7bfc18026473590d6e0509880d3948acfcb910338118a27457fb870d13e564f6cc3e1248c694b21d965b2af9f4251988d500d3","ssdeep":"192:ws25vvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFheB7q:wk5a28wa8H5tfW","tlshash":"e4524c7b00b017a6fbf09321f100f9a663c91d862c57a5e38e7f539259a00e7b5cb65d","size":13330,"data":"","first_seen":"2026-05-01T02:21:29.301156Z","last_seen":"2026-08-11T19:56:20.329112Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff6e6f71e6f8808b46cdcc36f8d90461","sha1":"f42977ba717412fc17be1325e0cc44f4e2780171","sha256":"d7d1c9c17dacd93d7204fbe8d6e1027d6077a57bc5c7103f84910f7719c4c6c0","sha512":"c555071473477017a26e7782bcadfcfa21dd53d26e19f043397ae9eac7e9c0aea395692332db096998740a87031d66abcc0ab914cddc400c11d601f12bc48242","ssdeep":"","tlshash":"dac08cc5a0d2ad102602645510af25e490248026748c9f128dd4d8482e620b88233eac","size":144,"data":"","first_seen":"2024-06-22T20:42:37Z","last_seen":"2026-08-11T13:06:41.592816Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-08-18T05:47:15.104347Z","times_seen":700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/PhoneSelect-14d9d303.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69f4d3e1e37ea87a9335bedff35a713e","sha1":"34ef932df0d82020c652bd425d4b0791903ae13e","sha256":"4ff7d8cfdf9a2e51b52083167f81845abb601cff4779b1e92b9708e815e751f6","sha512":"ae9d1cd41e7d5d36a875e7d826b0ad24debd960257721f78e94a0475d5861e6471331368715f2739cf6bf2a9aefe0f99caa488517e924c926adc9fe8135c4d16","ssdeep":"","tlshash":"9a5194d87831cab5f17747ba61261160620d5f4ab1399cf6a0fc86633bd7cb8a419b2c","size":2450,"data":"","first_seen":"2026-08-02T00:23:08.005042Z","last_seen":"2026-08-02T03:13:58.178307Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/TgAutoLoginBtn.vue_vue_type_script_setup_true_lang-3c7f0ffe.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d9c9d40375440e8069350df7e04c7a3","sha1":"045d1ae562efb6edb8cdd919b9e6dbc2f6bb817f","sha256":"e667c8ee27d8824ad460515c16abebeda98e5a833cedf2fbb8d1d960455d6443","sha512":"974fc568061efbbd59c3d3ad5f5f90d0066223566b9e518d0de4bb661646e1cf0ceeb871e47318cfad650d4c906106f5ab8a92aa364e26347be920797420976d","ssdeep":"","tlshash":"0011568c2827c3bc525904a5893dd104613b3e7f123ad5d9a06c5d255ff6472ebad378","size":869,"data":"","first_seen":"2026-08-02T00:23:08.008619Z","last_seen":"2026-08-02T03:13:58.169565Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/bg-login-88a986e0.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b10ca2ea672ff38520d575b6c8d0f38d","sha1":"6b6351b00d40e7776535087053397595da113960","sha256":"571449a9edd0a4eabb2ee4251cbaa594f616e67c1f1d44afad8b1ba066bb2f6d","sha512":"20b3a8a04245f7c13b5475f961e587ed4592c772f5bd986be167a95cefa1c381264899e4f9493268733b9e052ec9cbf86420591aea9dd7685c32043319a03122","ssdeep":"","tlshash":"96c0120c4ec88c932c2c7044410788c0084c13b214aacfbc083088083e2ab83809c938","size":174,"data":"","first_seen":"2026-08-02T00:23:08.036942Z","last_seen":"2026-08-11T19:56:20.367554Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/useLogin-93c3127c.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"696ff785c9be2fddaad2541b1f6132db","sha1":"b7a235cd7f047a1f11cae504093f10231b851c4b","sha256":"6e3105bf9ab714c540c103d28092a65bb2987f6232d369415ccad93204f3275b","sha512":"643c47cc62364dcfa001795e0203aa7e613287a521fc65e93f3015034da45bb67c1503e5b60623c594ca947ce45e826d6ed5e3dc7222c3434ee57482ecae04e3","ssdeep":"","tlshash":"fe717808381016775b742db238e10568a3fc8b042c44cedee5a9455b1e37e6ed7b5979","size":3645,"data":"","first_seen":"2026-08-02T00:23:08.042629Z","last_seen":"2026-08-02T03:13:58.184644Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-ed2e4280.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58aba61bdb49a622b86778a8a3d31cf6","sha1":"c3531149bbd7720f9901326a0f3f0793371840e2","sha256":"7baab4c7a2af7f6a8f455506109f48728f9fda6c2512ac42b27781364e4897e7","sha512":"c5c3c061f46695dff386277e527c926c5de10ff4b49be031e14035b6c2183e2eff86faf8bf2add3adf9b8e16af56da25e1a178b878143f74a1e0f5791cc7f53a","ssdeep":"","tlshash":"f311321ebcf0cdba00692bc16a3b0036661b059d5191d0b1ec9e898417bd8d088affac","size":1083,"data":"","first_seen":"2026-08-02T00:23:08.015106Z","last_seen":"2026-08-02T03:13:58.18135Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-d7e20d3e.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfc6046666f6e89d79978071983e2451","sha1":"54583fa526f1077caefb10c51d7b2ae5f61db073","sha256":"f74e2692cc6ac24f5db5e5d93177f75f17047425367f054a4c1bf9bd4f889859","sha512":"61958ef7a678763df14b3b997efa729047ea73f7d845404d369b37bd1c80b20b1737926de1abcc837054929ba805ece7b7266546ce70e83a2cbaa58dcfca8754","ssdeep":"","tlshash":"ab41546d79c89078db7bc8cc90220506fa175b5512345df1e0aaad6c2e2b548e177e35","size":1955,"data":"","first_seen":"2026-08-02T00:23:08.017269Z","last_seen":"2026-08-02T03:13:58.18647Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/LangSelect.vue_vue_type_script_setup_true_lang-c1893f8b.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0841c76478e6f5cfb6f77449b58afbe","sha1":"5f6c2ba9e42347beef484a795b0068bf9d9c891e","sha256":"aba9e03e2afa7d518ec48f1e13838d7ea7b0f98774c1a30bdb51de3af283d21e","sha512":"9b9ab9f6f96c87a41ea4d330b5b0183d8053e042ab256348afde6c334db9bd0afe71f7d34a6965e155d22a677aae203467f3c5c417e73a7b1e9254b0129d9ee4","ssdeep":"192:+cbTNdcP2Rfg0MxGrY5jlJSBTVbgad/rHj3LPthkMIKzIg33HZYuUIAz8lkt:+c/y2RzuGc5jlYBTVbgO/rHj3LPthkMK","tlshash":"5e323884b520dabeaa76133a4dc37151720d1f9fe58bb591b1edc81a27d99f0b008b7c","size":11639,"data":"","first_seen":"2026-08-02T00:23:08.056712Z","last_seen":"2026-08-02T03:13:58.170051Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/login-5d39eb37.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ff9ab9ccde02a3b8c95c1e56d5ed072","sha1":"7eb08308a7229d3fecd30b2b4c2fea59e33a25a0","sha256":"e1319d92caee936299f6c3765ebad29ad5133f17cbd114c49c5b3d1e9ffbbc8f","sha512":"47427a8613cca3d0c9f3131527e0e4e455f662cc67ede02f53308b5998e6a20f37d470b1503ed51963a0fa32a2603ef42c304e9398bff3720fec7ecb812cf49a","ssdeep":"","tlshash":"35e0c04d5c51c27b40a4acdc05101c6c571c49f413bdef58d4664d60db91183cf9e764","size":352,"data":"","first_seen":"2026-08-02T00:23:08.051689Z","last_seen":"2026-08-02T03:13:58.17215Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseInput.vue_vue_type_style_index_0_lang-0ddd7291.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a6dbc63c445861430ee95004f04f2a","sha1":"6a4ab1410fc668f3913721f2ffaf82c99b6bb532","sha256":"dd7d3805952ccb3717f3dc42a180197562dcc818f389a4218a6fd2e44e2a826f","sha512":"7be97b0ecadb175054aa1fd20acf47b766b2f418014db57beaa8008f70485911e23f8b054e5d7a859f9ec739c22261310c96d111333130fee568bf05f4167e20","ssdeep":"","tlshash":"cb416504eca6dff2e9676655a1cf0c31e15427a7856605a150f642393f8acf0623bf58","size":2393,"data":"","first_seen":"2026-08-02T00:23:08.010833Z","last_seen":"2026-08-02T03:13:58.16605Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d860e04454fa825ccf8d7c91a80c48e","sha1":"46d75823757172181cb408537bc34a4891e2501e","sha256":"b5d8a0b035a8145892c8a5fdfa42287e4252f75c4c5163c6502f20bcecc730c3","sha512":"f83783a980875c43bb289e9ee627c58f1bceb58cbc46a588b45b78f25ddaa518bccf4bff4cedb6edf343319781ff807c2002274538b5641565d380b9daabc8f6","ssdeep":"","tlshash":"e5c08cc4a0d66d005f02a41021ef24e890248026b4481b028d94d8882e220b09233e9c","size":139,"data":"","first_seen":"2023-06-05T21:34:11Z","last_seen":"2026-08-16T04:34:19.30731Z","times_seen":1705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-08-16T17:06:22.88408Z","times_seen":671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/FixedTools-30f9806f.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d1088ee86f46a358bba4918136b597","sha1":"9cb67fecc9ec06a86bb4cd21ee058bbfb720ecec","sha256":"f5e8f4cb5773c9aa940cf0edd0e32bce17a04598e7717b91624e6a12429ebc18","sha512":"73727bc00198927b93b36d4b6d5bdfbe3b30438a67b404e691776c91aaf853db1cfad77d2120f48093787a6b9f325244905d77d757151d2a0b05aeaf0d0f0d76","ssdeep":"","tlshash":"35f0238e3c45d2f8411d4849e42e1027739e3fa1537da9d0e0fe0d35ab91095977a7c8","size":475,"data":"","first_seen":"2026-08-02T00:23:08.012962Z","last_seen":"2026-08-02T03:13:58.171533Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-08-17T15:04:21.12129Z","times_seen":2598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4180b388c712915aa8bc3ddc204a3fb5","sha1":"3372b6f6a2cd3838500dcb9295e259c5ab31e4f9","sha256":"811afefdadd52874d34574e5b9bb4ed450eac93f4a0b0b186f8ce43b02acfefa","sha512":"9958d8601831db75c6b0225d52c39edc068c0b6e350da06c835acb307ca21fdd7c39bf80d6f1d1fc27da48a52a2431f0ecacde1e4e97992405d692f4905d9f91","ssdeep":"","tlshash":"66c08cc4a0c22d402606651010af24e49034802678481b029c94dc482e220b08237e98","size":136,"data":"","first_seen":"2023-12-06T04:41:19Z","last_seen":"2026-08-11T19:56:20.38494Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4a632459a011f9cf34cc3f6a449d24e","sha1":"23c6bb20ee82a11a54bfd4764e76b9fd86cf57fd","sha256":"ebb303d9df1321004f0694d1b1872542665a684d1f7cc90df2a8e3a0f286cbf0","sha512":"121db1d01b5f5ca50ae592bd141d36a7e2f650220c081e8a7c6d49f8d692b2ff12e36cd6bfcd1be3691d436eaef2fcefd1d5f36dde0a91089407d466bbf6d743","ssdeep":"","tlshash":"c6c08cc5a0d22d502606681016af25e490244036748c5b028c98d85c3e220b48333ea8","size":140,"data":"","first_seen":"2023-06-08T15:13:23Z","last_seen":"2026-08-17T07:32:25.978444Z","times_seen":1038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-4300edc6.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5edc208ab235483165f244b3cee8bf28","sha1":"87e8351d96df647e4227682802507dee602df24a","sha256":"7ba09b5df40723140a54e4fee959501819f5f0fcde44f5604674f60c06581a76","sha512":"5994955d431313e46538bd0b3b892bf44e578547d1ba103c056e35c9a7b4f19df37ec320aa3b9a051f8d199224ab412231d63e4055f8af51f53009bd33a362fc","ssdeep":"12288:6w9Nzoj0+KYPx5Dh7bruKM1QsY+WJRRG+/pVo2oD8D+RZAtJz36KA068iCC:6w9aj02Px77b6KMmsKG+cDizVA068iCC","tlshash":"1d95a828191bb754a15cc4cbf93b3cc480d9e286a007d0d61f354bb767b1b52ea9deb2","size":2026291,"data":"","first_seen":"2026-08-02T00:23:08.078055Z","last_seen":"2026-08-02T03:13:58.194299Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/email-3c982db7.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"657ed83981cb10e945193fd726958648","sha1":"4e14f8801a22cd5e1d37e80d0f9c3a4e177c709f","sha256":"6d930e4ac43c2f3e4fed1c8c5c6ca5527afc50272b90ac87ed63dc487f57ed4e","sha512":"280e7579d73e720ea75917ef9f9e647e2ef5d31a8cf41f7afa62a20a115cc27ef7caaaf1575fbb854d709151339fed1438e2118ccf1b3be89fa8928dfbc9aaaf","ssdeep":"","tlshash":"36900417040005f0051c34c4ff31c55417c151347d155355d055cd4df555d55f74fd30","size":53,"data":"","first_seen":"2026-08-02T00:23:08.04043Z","last_seen":"2026-08-11T19:56:20.316556Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseUserTab.vue_vue_type_style_index_0_lang-239e6f2b.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29e320d5e2ea86c5fd76a2aeaf6cef76","sha1":"6935d9d438b618e92d1baaca8ce33f8ebb191681","sha256":"3dd1b195a9aa62682c4ff3e512fbb9daebc1ad42554446e675182bb75a39825c","sha512":"9540a045dc38fa83fe2779becda6f65914c5dcf08e96d5b36a10bb3f906c9f36c9b7ee0a079cd355eecbfab668b01bf5e0c21b05a8fa5525d3ff538d87d47cc1","ssdeep":"","tlshash":"4101d0cca4b9cb7ec0970690266b101484929b8de73d8d5460ac85221797ca06bef72c","size":740,"data":"","first_seen":"2026-08-02T00:23:08.024887Z","last_seen":"2026-08-02T03:13:58.187126Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/#/login","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"85cdff17564cdeae6cc2a7d15a194016","sha1":"fa111b15d2f2f284314d5c6f953480fe989f6a42","sha256":"b07179b3bd08374b256515ca2ec1db26ef23f35ea969dfc16e232170c2119a5d","sha512":"4f631fa87f3851821f10e989dc84c331edbfd7e4bf9455e0b7804a6c282556a8839cc7692576b6be20a18a23fb3bdbfa64cb31d223b1a3b9815f1f9a6e9a4efd","ssdeep":"","tlshash":"ddc08cc4a0c22d101612646420af35e89024802a744c5b128c94d8482e660b49233ee8","size":144,"data":"","first_seen":"2024-06-22T20:42:37Z","last_seen":"2026-08-11T13:06:41.577379Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"false","filename":"https://www.2026ee.shop/assets/index-4300edc6.js","line_number":93,"column_number":53998},{"level":"log","text":"/user/app_info?d=17856301549530","filename":"https://www.2026ee.shop/assets/index-4300edc6.js","line_number":93,"column_number":55822},{"level":"log","text":"/public/get_lang_json?d=17856301554811","filename":"https://www.2026ee.shop/assets/index-4300edc6.js","line_number":93,"column_number":55822},{"level":"log","text":"/public/index_info?d=17856301554901","filename":"https://www.2026ee.shop/assets/index-4300edc6.js","line_number":93,"column_number":55822},{"level":"log","text":"/public/index_info?d=17856301561091","filename":"https://www.2026ee.shop/assets/index-4300edc6.js","line_number":93,"column_number":55822},{"level":"log","text":"true","filename":"https://www.2026ee.shop/assets/index-4300edc6.js","line_number":93,"column_number":53998},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj58 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj59 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj60 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]] kind:ArrayLike length:2] sealed:false type:object]","filename":"https://www.2026ee.shop/assets/useLogin-93c3127c.js","line_number":1,"column_number":654}]},"http":[{"url":{"schema":"https","addr":"api.2026ee.shop/upload/img/6a6b452aeb39.webp","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.843Z","timestamp":1785630156843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /upload/img/6a6b452aeb39.webp HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:37 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 12:35:54 GMT\r\npriority: u=4,i\r\netag: \"6a6b452a-3408\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yd9Uhz3f868QGOuBh9LYS0Srr7k2Zo6ki5E7%2FcZQUYYYyKEA9l3VqlWsby7ELDkrPFCMZWzu%2B%2Bl3q%2F93tLNWR2KaOwB2b%2BQrWfbjPLs2w%2F21irZHrKgS%2F6oI2bTIGvb%2FLS8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a248ede0493f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13320,"size_decoded":14065,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 657x1170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"68e8c8d35fcf15ecc64f8298997145d6","sha1":"59ea25fd6b92d9790d2910c83bf5ad925740fdbe","sha256":"e36392053eaebb3a98ed563282afa340d3d7ca1968359007c408514243daa6eb","sha512":"5af44408df5073a93876e09ae72f3e25edb784776ab65065490dd936002ebffd76d5f5a297a2c1f04dc41a71bc69e4c5df53fecb739fb63131d46823a3306919","ssdeep":"192:g00RJCu1nG18ZfJAt1GX5j137cbXDEOqc2blu1Pj7Yba2GTjSbgGM/xQ4jM76F:8JCEnrLAt1Qj137EXJ2u9j2a2GK8H7P","tlshash":"f352b0df9e9b31ebdca221b8476453534cb4aa450198b3c0238b51e8d5dff87398b563","first_seen":"2026-08-02T00:23:07.993044Z","last_seen":"2026-08-02T03:13:58.17333Z","times_seen":4,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAopxRSW32.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.861Z","timestamp":1785630156861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwAopxRSW32.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.2026ee.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14200\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 08:11:12 GMT\r\nexpires: Fri, 30 Jul 2027 08:11:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231084\r\nlast-modified: Wed, 10 Sep 2025 16:29:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14200,"size_decoded":15013,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-18T03:14:18.101338Z","times_seen":3007,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":3,"connect":32,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-55a3462f.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:33.796Z","timestamp":1785630153796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/index-55a3462f.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-155b8c\"\r\nexpires: Sun, 02 Aug 2026 12:22:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ag3wEFhPgq8it61%2Fkb0%2FLyio6pRxKFIw80ErNacxd0yXawsjiMJ2xHJrkLMUCBP05IsO3h8cRjtI0I6cEfwpjuMu9wZigwNi%2BMCI7v0404G%2FcTisgfWQhiLTMYiaVDPO8dQ%3D\"}]}\r\ncf-ray: a248edcd38cf56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399692,"size_decoded":317492,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"1e587773168a4d5ccbcd13141a65b5ac","sha1":"0377aef275a1991b13b8426e67a94f4d8d2c9275","sha256":"1f30e51ae56ecd71233fc44e0d6f844fd024d8958b26913f72b0e2b2d9a1911f","sha512":"43e1d5a25710bb1e12b987a4df52a81bc931600fc671191fe2545eb77ac3391b569a4710c11c3d460c80c0b5727225894ac9ec2bec73fd1ec6bd82d03a7e25b7","ssdeep":"12288:Un1+BnTAm191cwaegjjuRNDuD55TSS12FhKR7hHucIQsJ:Un1wTAC1sjsuD55TSS12FhKR7hHucId","tlshash":"2c253cb87bc845bdfd0bce260728954c651ff1a1fb418990562efa3043973abb653278","first_seen":"2026-08-01T11:38:59.653826Z","last_seen":"2026-08-11T19:56:20.330884Z","times_seen":10,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":578,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/upload/img/6a6b42cf4a7b.webp","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:35.484Z","timestamp":1785630155484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /upload/img/6a6b42cf4a7b.webp HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 12:25:51 GMT\r\npriority: u=5,i\r\netag: \"6a6b42cf-47ae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWONS%2F2K1kvAcmAzIPj6EhVyM1W65UOYWLbEAI6QeeizDTw725FZcc8Zx%2BPPshYjWai3p%2BboexEnaPx5yl%2BkO%2FSAWQb8afROhJXdXUFbB79j7a%2BFb0IJWnYVDc0nz5xeiuQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a248edd7c90056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18350\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18350,"size_decoded":19091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7cdd82162d569823021a1a511cc81f1","sha1":"eea87062b143f4c191f891c91beaa7fb2f619a90","sha256":"9349713ef2961520b63a83fe4d019218c4a4affadfbb2c721b5f4b0fe18acc52","sha512":"7ef3c38011a8741449217eb283549a05cc6fe578a97156e140c8bb895762b04983f6063f0f602dbc16745a2c39a3703f4b4eb5bbb2c501071864082111b7abca","ssdeep":"384:tyTII8sdhhnow/RNLRBqeZ30ppLwdc+HpEcAgj/pdCRe:mIkdJRhq3L1keipOe","tlshash":"0482d033e6dc6da9ea7edff802bfc65d480d5a606412c94a22434d813add071db2db93","first_seen":"2026-08-02T00:23:07.998124Z","last_seen":"2026-08-02T03:13:58.177612Z","times_seen":4,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/phoneCode-dd4884b8.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.460Z","timestamp":1785630156460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/phoneCode-dd4884b8.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 16 May 2026 02:05:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a07d100-345e\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fy09wH8291TALcpu%2FHKJNmIM3YlwS0LYiGB%2FqMAw5OyjtgoTHAeZMyh2qXu6bfBBEYY5jShK7RqacHgD41BBRnJPlNzz54eoWuj7FIBrMwsocGRJzn2SIjeIvePyJY22OSk%3D\"}]}\r\ncf-ray: a248edddd91e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13406,"size_decoded":4158,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (12040)","md5":"a75170b1e0eeb35731481bb8575519ac","sha1":"dbd7730f21df29d66e02ef79b0583e248c5e9031","sha256":"3cf36d246507ccc200645e351a1bcc55d11c35d41ceaeca70b42a1f2f178a500","sha512":"d01a521d84fd41c801c3bb99af7bfc18026473590d6e0509880d3948acfcb910338118a27457fb870d13e564f6cc3e1248c694b21d965b2af9f4251988d500d3","ssdeep":"192:ws25vvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFheB7q:wk5a28wa8H5tfW","tlshash":"e4524c7b00b017a6fbf09321f100f9a663c91d862c57a5e38e7f539259a00e7b5cb65d","first_seen":"2026-05-01T02:21:29.301156Z","last_seen":"2026-08-11T19:56:20.329112Z","times_seen":79,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/upload/img/6a6b2f771501.webp","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.055Z","timestamp":1785630156055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /upload/img/6a6b2f771501.webp HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 11:03:20 GMT\r\npriority: u=6,i=?0\r\netag: \"6a6b2f78-d3b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBdoveiLhHxFh%2FXID8XJAwrxRuqgmfcGldm6trCAbdX33Na7faKtMJ6Z5aFZUz7sUZHA3cGfh5yxKby5QHw67z12XJUVEU%2Fw7SKTt1F3XPS55JSEOItzc2YYPblanb2oQq4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a248eddb591256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54198\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54198,"size_decoded":54934,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c87afd85195d38ec227dd6ed844e2385","sha1":"677ef092b5b1be35fb83b8bfe58b51f6ed0444f8","sha256":"e7cad46f1e31f76193179e95280f555fc601edf8d352647ac748f3a33d5b5acb","sha512":"13c900dd868199e3f7eb5b44bc234a401c88affbf7cc96eff0a6a4bb8afb3cec3e3159afab10b3829d54eca5cbe32469fd346b10364953c6f36e8e40f442c8d2","ssdeep":"1536:0HrQ3CHWa7fZpjBCR3tNaJk1FG3eUs+wz:0L6C2a7LQjfU0z","tlshash":"2b3302d3b08f719d70f118dde13221aa18e35db02ba5e9f09641433dedaae7759a213c","first_seen":"2026-08-02T00:23:08.002165Z","last_seen":"2026-08-02T03:13:58.170915Z","times_seen":4,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":274,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/PhoneSelect-14d9d303.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.457Z","timestamp":1785630156457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/PhoneSelect-14d9d303.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-992\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wgup9lA7eMa6mrrj%2Bp27TP351hMN5o3Rd9bVPHCGx39%2F0uChqM%2BlGjghfnu36Ky6DbiLBAd6MeYOvOl5tYi4LhgihtZ%2FEVO4NYnoaz%2BNNRAqatmHlaGgzeYIkJwItQRlgo0%3D\"}]}\r\ncf-ray: a248edddd91d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2450,"size_decoded":2089,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2449)","md5":"69f4d3e1e37ea87a9335bedff35a713e","sha1":"34ef932df0d82020c652bd425d4b0791903ae13e","sha256":"4ff7d8cfdf9a2e51b52083167f81845abb601cff4779b1e92b9708e815e751f6","sha512":"ae9d1cd41e7d5d36a875e7d826b0ad24debd960257721f78e94a0475d5861e6471331368715f2739cf6bf2a9aefe0f99caa488517e924c926adc9fe8135c4d16","ssdeep":"","tlshash":"9a5194d87831cab5f17747ba61261160620d5f4ab1399cf6a0fc86633bd7cb8a419b2c","first_seen":"2026-08-02T00:23:08.005042Z","last_seen":"2026-08-02T03:13:58.178307Z","times_seen":4,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseMainBtn-cf1599ad.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.468Z","timestamp":1785630156468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/BaseMainBtn-cf1599ad.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\netag: W/\"68d3a468-da\"\r\nlast-modified: Wed, 24 Sep 2025 07:57:28 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlIQvEU91UwXMRtWJ5lAgHvIGNzSax7fZPdXS9iuIk8BA2l%2BeGutmLVLRSGp6TRmBXtTz8Kkhn4uoCPZoXSqgKPYWGiM24rlll1%2BFjV1cVO2%2F8nPw8wz753yb8rMHPduIL0%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248eddde92256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":855,"mime_type":"text/css","magic":"ASCII text","md5":"c1fb97309cdf49465e4f0c30d3076578","sha1":"a89aad9837fa74c4b617ae97df0cb4bd6be84cd8","sha256":"cf1599ad93a05243bea5ed51b989a7bf72f5292a94b612154a39d30d50e35e9c","sha512":"c43620fa6919ff89a83a41252ce19bfef4cf68662f34b0a054749d7293c2dcb601ba2dace836f22635988cd596f8bc16b3f7b331a7eb622cb0df89e256ce9030","ssdeep":"","tlshash":"4ad0128d3191b97e18be87cc75ec50214b8038975f51beb9655429dd43872773c7305e","first_seen":"2023-11-04T18:18:58Z","last_seen":"2026-08-11T19:56:20.37306Z","times_seen":312,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/TgAutoLoginBtn.vue_vue_type_script_setup_true_lang-3c7f0ffe.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.475Z","timestamp":1785630156475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/TgAutoLoginBtn.vue_vue_type_script_setup_true_lang-3c7f0ffe.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-365\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pf9DQf9n8QdtpziMIADUaBGt3lvSili6qvLZDiR%2FAporSMk3QqTmDW7D4gr%2BUlRlcxEkTo4wmyXA6G8FFbGDRAJQJjCGxYX8t2zv4q77bY%2FlAZfuAKUgyovw4U3ZqdQJ0bo%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edddf92756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":1308,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (868)","md5":"4d9c9d40375440e8069350df7e04c7a3","sha1":"045d1ae562efb6edb8cdd919b9e6dbc2f6bb817f","sha256":"e667c8ee27d8824ad460515c16abebeda98e5a833cedf2fbb8d1d960455d6443","sha512":"974fc568061efbbd59c3d3ad5f5f90d0066223566b9e518d0de4bb661646e1cf0ceeb871e47318cfad650d4c906106f5ab8a92aa364e26347be920797420976d","ssdeep":"","tlshash":"0011568c2827c3bc525904a5893dd104613b3e7f123ad5d9a06c5d255ff6472ebad378","first_seen":"2026-08-02T00:23:08.008619Z","last_seen":"2026-08-02T03:13:58.169565Z","times_seen":4,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseInput.vue_vue_type_style_index_0_lang-0ddd7291.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.476Z","timestamp":1785630156476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-0ddd7291.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-959\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixo0jd8YmNq4HvQtTOjvHYhxZrWY0cdG3NyRTCVjKpUK1bPckLuoFvapM8%2BmypaKTO2QJmqKRSE2mSOMDOLcOwZ3KaRziQ8%2FZT0oLze7ek%2B7O3IQI6M1Tjggf4arnCricnM%3D\"}]}\r\ncf-ray: a248edddf92856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2393,"size_decoded":1722,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2392)","md5":"88a6dbc63c445861430ee95004f04f2a","sha1":"6a4ab1410fc668f3913721f2ffaf82c99b6bb532","sha256":"dd7d3805952ccb3717f3dc42a180197562dcc818f389a4218a6fd2e44e2a826f","sha512":"7be97b0ecadb175054aa1fd20acf47b766b2f418014db57beaa8008f70485911e23f8b054e5d7a859f9ec739c22261310c96d111333130fee568bf05f4167e20","ssdeep":"","tlshash":"cb416504eca6dff2e9676655a1cf0c31e15427a7856605a150f642393f8acf0623bf58","first_seen":"2026-08-02T00:23:08.010833Z","last_seen":"2026-08-02T03:13:58.16605Z","times_seen":4,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/FixedTools-30f9806f.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:35.471Z","timestamp":1785630155471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/FixedTools-30f9806f.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-1db\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:35 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1WEb3GHaTnhlaN%2BdBtULhZc3LTKxeVcqMvz00tdLTv8zzfUodJEOI1Ur9Y2QteerhRYL49UE6u9BIZ%2BQIS0rREqhAgdaNSD0teXtefDW%2B%2BqN87jcOwcxs%2FNWLBoO%2FpW4GE%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edd7a8fe56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475,"size_decoded":1080,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (474)","md5":"36d1088ee86f46a358bba4918136b597","sha1":"9cb67fecc9ec06a86bb4cd21ee058bbfb720ecec","sha256":"f5e8f4cb5773c9aa940cf0edd0e32bce17a04598e7717b91624e6a12429ebc18","sha512":"73727bc00198927b93b36d4b6d5bdfbe3b30438a67b404e691776c91aaf853db1cfad77d2120f48093787a6b9f325244905d77d757151d2a0b05aeaf0d0f0d76","ssdeep":"","tlshash":"35f0238e3c45d2f8411d4849e42e1027739e3fa1537da9d0e0fe0d35ab91095977a7c8","first_seen":"2026-08-02T00:23:08.012962Z","last_seen":"2026-08-02T03:13:58.171533Z","times_seen":4,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-ed2e4280.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.469Z","timestamp":1785630156469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/index-ed2e4280.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-43b\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fz6vpywEK3eVUZ6zkA9pQ1gZ6tBTyE7HKrw6bPDkONnJ14K2cReQe2mvGZY6jY8Y3OZqtH%2BLWJ6rEdKSLp9y1FeZk8b1v2e3IhmEibrp0WmpshAMmzEmdHHk7GF3sSt9rlE%3D\"}]}\r\ncf-ray: a248eddde92356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1083,"size_decoded":1363,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1082)","md5":"58aba61bdb49a622b86778a8a3d31cf6","sha1":"c3531149bbd7720f9901326a0f3f0793371840e2","sha256":"7baab4c7a2af7f6a8f455506109f48728f9fda6c2512ac42b27781364e4897e7","sha512":"c5c3c061f46695dff386277e527c926c5de10ff4b49be031e14035b6c2183e2eff86faf8bf2add3adf9b8e16af56da25e1a178b878143f74a1e0f5791cc7f53a","ssdeep":"","tlshash":"f311321ebcf0cdba00692bc16a3b0036661b059d5191d0b1ec9e898417bd8d088affac","first_seen":"2026-08-02T00:23:08.015106Z","last_seen":"2026-08-02T03:13:58.18135Z","times_seen":4,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-d7e20d3e.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.470Z","timestamp":1785630156470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/index-d7e20d3e.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-7a3\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cvmgsq%2F0gX2ftOukZ49AplLFPJLWyABr%2BIMmK0moptKwIBB55dqkQbluiqPhY%2FuQmtdoPDhnjuF6BMc5dL3HI94NVBJ%2BMXDQVstd7wtJ9b5LzTFl809mvGZlwtitYNjB0EY%3D\"}]}\r\ncf-ray: a248eddde92456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1955,"size_decoded":1699,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1954)","md5":"bfc6046666f6e89d79978071983e2451","sha1":"54583fa526f1077caefb10c51d7b2ae5f61db073","sha256":"f74e2692cc6ac24f5db5e5d93177f75f17047425367f054a4c1bf9bd4f889859","sha512":"61958ef7a678763df14b3b997efa729047ea73f7d845404d369b37bd1c80b20b1737926de1abcc837054929ba805ece7b7266546ce70e83a2cbaa58dcfca8754","ssdeep":"","tlshash":"ab41546d79c89078db7bc8cc90220506fa175b5512345df1e0aaad6c2e2b548e177e35","first_seen":"2026-08-02T00:23:08.017269Z","last_seen":"2026-08-02T03:13:58.18647Z","times_seen":4,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-9e27b9a5.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.471Z","timestamp":1785630156471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/index-9e27b9a5.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Sep 2025 07:57:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68d3a468-8b1\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLERzhuGCvXIm8BTFue9P4W1qmCPksDcNzqA9XdmO6xx%2Fqm5uL9LWtS%2FWV4jnDyC5%2Fx%2FNNZ%2FtaovMidUMb%2BULMRnFrmjcwgR0WUf%2FOBYuWzXiWFaV%2B0LXc9QrzhuvkeJclo%3D\"}]}\r\ncf-ray: a248eddde92556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2225,"size_decoded":1388,"mime_type":"text/css","magic":"ASCII text, with very long lines (2224)","md5":"291bcc8d7a5ff72598f2133c707795f4","sha1":"e802d64cec514c1bba71d5924634ff5f446ec12c","sha256":"9e27b9a5b1a029c7571fb301b2c6f1b38c813f064b1b739515f31fb95bf40768","sha512":"4267b9006927c13708bc59cbb549b5820c15563b4ec9320180fb2949c7a1a1e88c237beb580e60c9e8759cb8182f22c0bf526e9b3d680d2270e7cfc95c95e6d1","ssdeep":"","tlshash":"f041f367daa045faae33a5990f5588c9b13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-06T14:23:01.801794Z","last_seen":"2026-08-11T19:56:20.326515Z","times_seen":155,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/LangSelect-3b1bb70e.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.483Z","timestamp":1785630156483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/LangSelect-3b1bb70e.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\netag: W/\"6a6b25da-77\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsI2H2TRRzLiszZD1iYtBl909Hp77V1nqoS2MWlvoeFyuArXJ6qz1ZrtXn1oMri2QPiWm%2FqSSFLFtlqvfDdKMyQ5EPdAENHIhyPLu%2FWZNars4AeSl9Dm7JGykdRH6Hk2Y5o%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edde092d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":820,"mime_type":"text/css","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-08-12T04:59:29.782618Z","times_seen":143,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/api/user/app_info?d=1785630154953","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:34.960Z","timestamp":1785630154960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"OPTIONS /api/user/app_info?d=1785630154953 HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.2026ee.shop/\r\nOrigin: https://www.2026ee.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.2026ee.shop\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYPsFhMq2WufKHznqz1zmtW%2FwRDNPUc0V7773daWJTypIZ9ZbuXHn7z5TbyIiYgBBDjpyzIRBXARqg%2BTzCyTptQeNdOLE8%2BJRhlxlkf2toTxDkBOWEM9FVtAkxx%2BlKoarOk%3D\"}]}\r\ncf-ray: a248edd4aeeb56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":789,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T07:37:29.075548Z","times_seen":17951427,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":0,"dns":6,"connect":16,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/upload/img/6a6b26d1a090.webp","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.053Z","timestamp":1785630156053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /upload/img/6a6b26d1a090.webp HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 10:26:25 GMT\r\npriority: u=6,i=?0\r\netag: \"6a6b26d1-39e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BuAcLMIy4PRSfFTWhWrBRfiDQg4Pvcj%2Bynm1IS%2Bh75PGX%2FFd2%2Fyz%2BNo13NHzwDzQ0lYHzjCIgEgSvYWOnBa3fooL2FitfwVPbhPI%2B8SkIfbuWePGUHKCZEg1hhnJbSKqeFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a248eddb591156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14820,"size_decoded":15566,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"23c3deb8082a0af55305925c6f15f26d","sha1":"bc3017d23a670c5b299a42b726802719c3e868f4","sha256":"10a68e17a7eb74fe2fab79b46b362cc8119123690355e9e412fd3d9a4441c8e5","sha512":"0e06d705609124abe9ebce32e1eb443003f710a34fd5797da52e0b384642ecd79672d160636e7817b61d5fd59e6b4e35e2b607c54163f3cd82f8e9c076c21b45","ssdeep":"384:/KvV3k7SC5HEgvbIy8XkXE00IcBlgCsNUtzgvDiLq5RSVDE2A:/Kxkx5kgEFXcE00RBlvgvGLqmDE/","tlshash":"ea62cf53c09a6bd1799a33dc38d95ca27e0fba447e2973e153c098c75c52abb49f200b","first_seen":"2026-08-02T00:23:08.02261Z","last_seen":"2026-08-02T03:13:58.173955Z","times_seen":4,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseUserTab.vue_vue_type_style_index_0_lang-239e6f2b.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.479Z","timestamp":1785630156479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-239e6f2b.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-2e4\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4NjhKTuw%2F6CR6ydP%2FSfa7z%2BRotJldZywO9RJnG00H6MjDAUBAhoPftdHBL%2FEqUKsimZh6abFotVwiQM6HQRCO0FcwU2TgWAIg7vnlt%2FU4vI1b%2FFmmSsP8RP9Ib4%2F4cstjY%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edddf92a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":1214,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (739)","md5":"29e320d5e2ea86c5fd76a2aeaf6cef76","sha1":"6935d9d438b618e92d1baaca8ce33f8ebb191681","sha256":"3dd1b195a9aa62682c4ff3e512fbb9daebc1ad42554446e675182bb75a39825c","sha512":"9540a045dc38fa83fe2779becda6f65914c5dcf08e96d5b36a10bb3f906c9f36c9b7ee0a079cd355eecbfab668b01bf5e0c21b05a8fa5525d3ff538d87d47cc1","ssdeep":"","tlshash":"4101d0cca4b9cb7ec0970690266b101484929b8de73d8d5460ac85221797ca06bef72c","first_seen":"2026-08-02T00:23:08.024887Z","last_seen":"2026-08-02T03:13:58.187126Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/useHome-4d3a6cf0.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.486Z","timestamp":1785630156486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/useHome-4d3a6cf0.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-eaa\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZvjEHfYXXzYSn%2BNL5zeSnoKdgjID6QESRaSAJuso4ke5pMhbXsNkt83qNPaEhYqhFOg2JCTa0Zkdmqt6BNFrAg%2BboLX9Y83Iq5mOT4D9MGoUVd4nqNWBfWZ%2FUt1hTPkEs%2Bk%3D\"}]}\r\ncf-ray: a248edde092f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3754,"size_decoded":2354,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3753)","md5":"6203dda613615b909ce7afe993f8c009","sha1":"efe8797ee938f9e13dac63cfd1289c6c1cae96f0","sha256":"f673c745e685b99bc22c4430231716f9066c3d819eec409d0e60b7145d2a3be7","sha512":"5a5161ac49fecbb6ba33cab0268330fff6c45d898c1969ac9a2a9744966162cc8474bdefd7562c155f1a2b5406dd7da89d7813ff0fd770ddcf0ae48da1d055a9","ssdeep":"","tlshash":"1e71411476a680b683f441f15eda1222a03fda027c4381deb2bb09664977fd9b5dce39","first_seen":"2026-08-02T00:23:08.027142Z","last_seen":"2026-08-02T03:13:58.18341Z","times_seen":4,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/upload/img/6a6b2f771501.webp","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.827Z","timestamp":1785630156827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /upload/img/6a6b2f771501.webp HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 30 Jul 2026 11:03:20 GMT\r\npriority: u=5,i\r\netag: \"6a6b2f78-d3b6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BS0GGCXrhYlH%2BI%2BaqKbxX6L%2FLuW5aSSGehKHWtriA0V485J2bTGm0ESJ6wWdQ%2FTFcO1woFU01Ja6Q90M3ntj1Ek30CPIzoeEoQDfUH9y9XV3qhsK8I6iHWj0wIGJg0rtYtc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a248ede0293e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54198\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54198,"size_decoded":54944,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c87afd85195d38ec227dd6ed844e2385","sha1":"677ef092b5b1be35fb83b8bfe58b51f6ed0444f8","sha256":"e7cad46f1e31f76193179e95280f555fc601edf8d352647ac748f3a33d5b5acb","sha512":"13c900dd868199e3f7eb5b44bc234a401c88affbf7cc96eff0a6a4bb8afb3cec3e3159afab10b3829d54eca5cbe32469fd346b10364953c6f36e8e40f442c8d2","ssdeep":"1536:0HrQ3CHWa7fZpjBCR3tNaJk1FG3eUs+wz:0L6C2a7LQjfU0z","tlshash":"2b3302d3b08f719d70f118dde13221aa18e35db02ba5e9f09641433dedaae7759a213c","first_seen":"2026-08-02T00:23:08.002165Z","last_seen":"2026-08-02T03:13:58.170915Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:22:33.530Z","timestamp":1785630153530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:33 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2Fksv2fPBNVGai0BQeNAVlExn3kF8WL6ELB%2BYdU7XO9m%2FrF9o2Dgbd8BLBqGmsESmez%2Bqgortk%2BHGw%2Bt2auPL6opbk6UTK4MI2R1Z9c4t%2FnYQbs4QQfsfAXyS1MDPISguQI%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a248edcbe8cb56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152986,"size_decoded":39251,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (54279)","md5":"454e92f23ee420c28a7dbbc1a26abcbb","sha1":"8bb5fca29039d4ab3467f57febddacbaf3765fdb","sha256":"fd6bb15f5176d45e1d6cf8f1982ba642f66e10390c0986a5f07df42210e64368","sha512":"35a8fc3c8ff6ff1959ef490751640ae042c67204f17b4585bfd4e4f78afd963df371dbc4f94b84680c4da9e1d8bb971f9d393045e35167973cd69c113a622488","ssdeep":"1536:imoOZI7RqsqLxJFApnPq4LBjJPu9WYZ9uGptLLWv2XyTO5Kwulq:Omuq","tlshash":"bde309f6a3e8a1e8e80bd3b8e676a476352b30ff3f45c648719c5a64fb2105d854dd80","first_seen":"2026-08-02T00:23:08.030016Z","last_seen":"2026-08-02T03:13:58.180128Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":42,"connect":11,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/api/public/get_lang_json?d=1785630155481\u0026lang=en","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:35.489Z","timestamp":1785630155489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1785630155481\u0026lang=en HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.2026ee.shop/\r\nOrigin: https://www.2026ee.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.2026ee.shop\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66B7nRYlVKilmI3gy1Viz2Yp1ddGozg0aFerKtQGB5SKikj1QkNJCJn6KRkCK3NLv2xmz8mgxxgENMfK6zpbSsPBqPEjxQa%2F0qA7d9BMl63ZCOKPvdmmHXItQ1yNkNGHUKg%3D\"}]}\r\ncf-ray: a248edd7cefe56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":783,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T07:37:29.075548Z","times_seen":17951427,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/api/public/index_info?d=1785630155490","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:35.495Z","timestamp":1785630155495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1785630155490 HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://www.2026ee.shop/\r\nOrigin: https://www.2026ee.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.2026ee.shop\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gh7klDp%2FsxSRkAoUIGZJdNtMJ2KIhFOzFqewE7sSgH4ajee7Cf4fJ1%2BuCMue2mgQNU11NrIM4aQxBsl2H%2FCg9LwJVPM0YSmBzlwK3xzCPd7xZZF01CBV3OdGj7IaK9gx2ko%3D\"}]}\r\ncf-ray: a248edd7df0056b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":787,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T07:37:29.075548Z","times_seen":17951427,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/ContainerForm-86d3935b.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.462Z","timestamp":1785630156462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/ContainerForm-86d3935b.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-e1\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOrPNlWcv6F%2Btu0xBqx%2B%2FsrWVT%2B6o70fRHKBOL2twzth9Z7EYjFA3W0i2emgHTaasP5LGXwMK0%2BsK0KGrhlAKi3nD7hLLoqNmdEX7cJjeMQwZyvwssKFAh%2BPu%2FLslnUoYec%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edddd91f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":918,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"056a71ec32511e9901a44ceaa120aa7c","sha1":"e55df7893efbfc6b6585a53c8a952fb543f5fd4b","sha256":"a0cfb6a65f794a902e2c9e00b612136e4dc3f7738ba27f4437b9f08e22ba6679","sha512":"2a8881b03dba11fc3d50f584462fa81bc8d51f4c4075e412212adadfeece2c6ba11023fee0bc810b12a45c54d9daeb090e1041b0861d710bc123cd6f9d40c5d4","ssdeep":"","tlshash":"6ed023086c00f273a075059c77a7143b0b253d6777b856d650558457571547fe34ff54","first_seen":"2026-08-02T00:23:08.032504Z","last_seen":"2026-08-02T03:13:58.178921Z","times_seen":4,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseUserTab-c449726b.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.480Z","timestamp":1785630156480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/BaseUserTab-c449726b.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\netag: W/\"68d3a468-67\"\r\nlast-modified: Wed, 24 Sep 2025 07:57:28 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLqy6HnvIOsMquEpVsa2fxzsFcKk7%2Bc2OZ3LC6Ly%2BNsWeLJob9%2FyNGv3K6wl3IEBSjkEcGw0rjzmL4LICHy79V1k4qBG6WlZ3a8zM%2FoZB69cs1WiWQjwdZYD67O0kKUpjFQ%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edddf92b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103,"size_decoded":794,"mime_type":"text/css","magic":"ASCII text","md5":"b8d7ddd09f6113fe70a8ce29ce0f4f9a","sha1":"e5e5284a913c5a08cb36b655cee62fab9ae2f736","sha256":"c449726b38d5164aa8a8d9c73e9c00f401e74c59b1bf2d6b974d15db8722372e","sha512":"b385a0a7b17f175fe07b11341303935f1327d46d8bc66073e545fa18a160d6e60dbe3e74b75e100ec6714b6ad09390305ae9d9bb2ca00a039a51913d6bf18320","ssdeep":"","tlshash":"5cb0924c1840b02a288161f80f5642e808493244ae028eb870243d5101c36f9207392a","first_seen":"2025-05-06T14:23:01.793345Z","last_seen":"2026-08-11T19:56:20.374963Z","times_seen":309,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/bg-login-88a986e0.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.485Z","timestamp":1785630156485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/bg-login-88a986e0.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-ae\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlllPgwBJRTqMXTGcEs6nq1yyz7gywqO1FaPbrIBXYk4G6IK%2FiFXtwXnXD6k7bXwUKyWmmYmL8DG7syu7a0mWkTeKfkPmkG1Kf%2FxCda8IYq5JQQeNRcXEph6K3ZzqvTiUnA%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edde092e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174,"size_decoded":838,"mime_type":"application/javascript","magic":"ASCII text","md5":"b10ca2ea672ff38520d575b6c8d0f38d","sha1":"6b6351b00d40e7776535087053397595da113960","sha256":"571449a9edd0a4eabb2ee4251cbaa594f616e67c1f1d44afad8b1ba066bb2f6d","sha512":"20b3a8a04245f7c13b5475f961e587ed4592c772f5bd986be167a95cefa1c381264899e4f9493268733b9e052ec9cbf86420591aea9dd7685c32043319a03122","ssdeep":"","tlshash":"96c0120c4ec88c932c2c7044410788c0084c13b214aacfbc083088083e2ab83809c938","first_seen":"2026-08-02T00:23:08.036942Z","last_seen":"2026-08-11T19:56:20.367554Z","times_seen":5,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ag88oa.123111.cyou/","fqdn":"ag88oa.123111.cyou","domain":"123111.cyou","tld":"cyou"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:22:29.691Z","timestamp":1785630149691,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ag88oa.123111.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T07:37:29.075548Z","times_seen":17951427,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"ag88oa.123111.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"ag88oa.123111.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"ag88oa.123111.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ag88oa.123111.cyou/","fqdn":"ag88oa.123111.cyou","domain":"123111.cyou","tld":"cyou"},"ip":{"addr":"38.190.250.187","port":80,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T00:22:33.016Z","timestamp":1785630153016,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ag88oa.123111.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Sun, 02 Aug 2026 00:22:33 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://www.2026ee.shop/\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T07:37:29.075548Z","times_seen":17951427,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":3,"connect":253,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"ag88oa.123111.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"ag88oa.123111.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"ag88oa.123111.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:33.790Z","timestamp":1785630153790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 02 Aug 2026 00:22:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Thu, 06 Aug 2026 00:22:33 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-08-18T05:47:15.104347Z","times_seen":700,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":38,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/email-3c982db7.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:35.473Z","timestamp":1785630155473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/email-3c982db7.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-35\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:35 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIaPI5Ro%2B%2BXkS6YPynJhZLeYxOLgqEgaHdj%2B%2FNTbtQPpH4vv8L%2FmrPsLN%2B9xaR5dSdG95y6oeSqDT5pOErKJqx2jLSKwnML5D2BJcf3lCnb6IP%2FAGlzmVgtYQaCyrDp9i34%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edd7b8ff56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":794,"mime_type":"application/javascript","magic":"ASCII text","md5":"657ed83981cb10e945193fd726958648","sha1":"4e14f8801a22cd5e1d37e80d0f9c3a4e177c709f","sha256":"6d930e4ac43c2f3e4fed1c8c5c6ca5527afc50272b90ac87ed63dc487f57ed4e","sha512":"280e7579d73e720ea75917ef9f9e647e2ef5d31a8cf41f7afa62a20a115cc27ef7caaaf1575fbb854d709151339fed1438e2118ccf1b3be89fa8928dfbc9aaaf","ssdeep":"","tlshash":"36900417040005f0051c34c4ff31c55417c151347d155355d055cd4df555d55f74fd30","first_seen":"2026-08-02T00:23:08.04043Z","last_seen":"2026-08-11T19:56:20.316556Z","times_seen":5,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.2026ee.shop/api/public/index_info?d=1785630156109\u0026language_type=en","fqdn":"api.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.114Z","timestamp":1785630156114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"OPTIONS /api/public/index_info?d=1785630156109\u0026language_type=en HTTP/1.1\r\nHost: api.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://www.2026ee.shop/\r\nOrigin: https://www.2026ee.shop\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.2026ee.shop\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FEN7JNM4qhWkKLWtulrgRYF6nNaYv%2B9VVUtWDGbujweKsMRw%2B84r2l%2Fl1c5ocUcWZs8CFqFipIu0NLfCMGsVkvR2SQMDzgFHRR2IWEEAMbKfEc1zgKm73s7idCirvUIEOc%3D\"}]}\r\ncf-ray: a248eddbbf2c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":797,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T07:37:29.075548Z","times_seen":17951427,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"api.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/useLogin-93c3127c.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.127Z","timestamp":1785630156127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/useLogin-93c3127c.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-e3d\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3I%2FiUnDhNgH%2FoQSQQOobVRPwqjwzJn8Ge14g2oSOw7DUE%2FeGtUbetJE%2FRiiWNM4mAY6VU1XQKrp47Cl4vRcNkW2QUY3FsJq3qv3FN34NHIdetSrduwiClnlOx%2BY471x0IeM%3D\"}]}\r\ncf-ray: a248eddbc91656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3645,"size_decoded":2352,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3644)","md5":"696ff785c9be2fddaad2541b1f6132db","sha1":"b7a235cd7f047a1f11cae504093f10231b851c4b","sha256":"6e3105bf9ab714c540c103d28092a65bb2987f6232d369415ccad93204f3275b","sha512":"643c47cc62364dcfa001795e0203aa7e613287a521fc65e93f3015034da45bb67c1503e5b60623c594ca947ce45e826d6ed5e3dc7222c3434ee57482ecae04e3","ssdeep":"","tlshash":"fe717808381016775b742db238e10568a3fc8b042c44cedee5a9455b1e37e6ed7b5979","first_seen":"2026-08-02T00:23:08.042629Z","last_seen":"2026-08-02T03:13:58.184644Z","times_seen":4,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/Login-91911cfa.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.455Z","timestamp":1785630156455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/Login-91911cfa.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-1966\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83DkUx6cf1YDh4VBdtP8maJjl%2BDU4d9x26ZGAGCV78OQEc1Xv5PWArHmYDTZ1YP%2Bff8HnQ6ypMnO7U%2FheByo92rHg8SS%2BtZH%2BYT1dMj3lvy45yFIRovhpKYR%2FwMcnnwLeWU%3D\"}]}\r\ncf-ray: a248edddd91c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6502,"size_decoded":3260,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6501)","md5":"085f018c7c58b222602dbdd182512fbb","sha1":"deac04b22b93d857e11c1e3461c0294063b043e3","sha256":"5f4cf05819af4f9fb81f694ed5ab0d0b34f66aad9592b682fefb96d2849dad37","sha512":"2283fd572bef804a53da6c72b7d1122b10e0ad07b55644706a316969f6e05fadeb13ae8ddd7ac0140f42e590371a9312539724c08770152ced3e236abee48d2d","ssdeep":"96:S8EPx0eg6LtfpNuSRzBbJnu+uZ8WYOith+aQ41RjXfA8T+HgQtDlitXJ/Z:bEm6L9pNlRzBbJu+6xYnt9BjfUDwJx","tlshash":"6ed1a659d429cbbae07b8565750a4810b20e1fafc340c7b2b2fc4a113f95df48b29729","first_seen":"2026-08-02T00:23:08.044944Z","last_seen":"2026-08-02T03:13:58.185265Z","times_seen":4,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-4300edc6.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:33.791Z","timestamp":1785630153791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/index-4300edc6.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-1eeb33\"\r\nexpires: Sun, 02 Aug 2026 12:22:34 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dS%2BlMwZBCA7Tu4Xferv92plx%2Byk2Y3UfkbRzPQKBz78UWChhyBMvN%2FN5qH9PQ1XwpZEHdynEidFyY68ubdZvoG%2BP4f%2BtadM78Ob2E1%2BNHFiDWp8GPm5ZzvpyqiWMOS9MCAA%3D\"}]}\r\ncf-ray: a248edcd28ce56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2026291,"size_decoded":328964,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16155)","md5":"ffda61c1eac119f6c276bffbc5d73ff0","sha1":"a5f8bb3413bab774a98597d400a21456dbc63c1f","sha256":"56396b9d4017f87096c9279e940cab88e3ce6c56d2583f595016daf980eaf952","sha512":"8ddcbe6b781687fd4f7e5eb18592fed3f26f62749a268821deef70d21a9ea80d1bdfa715a8fac2562f8279decffcfcc29d95ab9ee62d1ce756d27c504d7505cc","ssdeep":"12288:6w9Nzoj0+KYPx5Dh7bruKM1QsY+WJRRG+/pVo2o:6w9aj02Px77b6KMmsKG+0","tlshash":"7925e9186a5ef310a918c0ebe93b2c85855ce586b00b58e15f7557b32bb2393f7dce12","first_seen":"2026-08-02T00:23:08.047883Z","last_seen":"2026-08-02T03:13:58.180705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":612,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/favicon.ico","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:35.094Z","timestamp":1785630155094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:35 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2B9XwjZjHVY850hglFkVzq5V3RYsoETWCHbHrMyw11cxiSye3hvAdFqP%2BOr5ulfwwpCLeX61FkniAyBjWlPPIRQQ9RLjtA78Ed91EhXvMGsYmkt2vxlWZ27TMUmPVwkykKw%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edd558f556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":699,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-08-18T03:13:32.33508Z","times_seen":319707,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/login-5d39eb37.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.126Z","timestamp":1785630156126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/login-5d39eb37.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-160\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEj74U3YOxWDnI6PImixsPAM7jXbDYHx%2Fp%2FAPePWRPi5kf8MkKgXVTY9qc%2Fnmva%2FtA2cdQmu5bOCBLqnVAG%2FI9h%2BU30QRIcx9ym8flWxBsxHu0Fe%2FLVo6A7yW35fAoU1%2BlM%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248eddbc91556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":1005,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (351)","md5":"3ff9ab9ccde02a3b8c95c1e56d5ed072","sha1":"7eb08308a7229d3fecd30b2b4c2fea59e33a25a0","sha256":"e1319d92caee936299f6c3765ebad29ad5133f17cbd114c49c5b3d1e9ffbbc8f","sha512":"47427a8613cca3d0c9f3131527e0e4e455f662cc67ede02f53308b5998e6a20f37d470b1503ed51963a0fa32a2603ef42c304e9398bff3720fec7ecb812cf49a","ssdeep":"","tlshash":"35e0c04d5c51c27b40a4acdc05101c6c571c49f413bdef58d4664d60db91183cf9e764","first_seen":"2026-08-02T00:23:08.051689Z","last_seen":"2026-08-02T03:13:58.17215Z","times_seen":4,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseInput-c9cbdeda.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.477Z","timestamp":1785630156477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/BaseInput-c9cbdeda.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-597\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sO4MgMMPvu2mL2lOuip9S%2BLihAbhUx9eocIUpF3fSfdNO8neIUjfi7L%2Fo9WvaAbvYD1z1FjoD8OGKnwsPu828IWLy1YrC02hBm2sJ17BxG5glOjFjGvlL3nX44diXkgC1eQ%3D\"}]}\r\ncf-ray: a248edddf92956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":1225,"mime_type":"text/css","magic":"ASCII text, with very long lines (1430)","md5":"93aff7411dc15ecb78fb338df0c3b7e0","sha1":"671c2c75a2e4549e555e03e7147642153de848d1","sha256":"c9cbdedaa08651ab547a993755cf75fa5fbdd78ae63f80b71149e79b1eece025","sha512":"8197d304bec452054c047920c8b21c908a845c54a0cb52556013636b18fbbb5be120a5ab8e72108cff76d32b4d1503b0c646b9a00cc7a1e609c891c6d4c95acb","ssdeep":"","tlshash":"34215b080d60df1b2caa6ef3e5c8da862c0854b34bb39d05d140602687958b53f3fe68","first_seen":"2026-08-02T00:23:08.053974Z","last_seen":"2026-08-11T19:56:20.318323Z","times_seen":5,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/LangSelect.vue_vue_type_script_setup_true_lang-c1893f8b.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.482Z","timestamp":1785630156482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/LangSelect.vue_vue_type_script_setup_true_lang-c1893f8b.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a6b25da-2d77\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gO4pOEI0Vc2omEkkKcbdKWmGOd6G%2FYdbyqs3vhRsCYrG6bBNXQYPXI1mx1zWXNK%2BBoX%2Bszh74tVBa65Gx6JAlbDfi1KrIYdtmNZ%2BJ%2B7lzbH4yju3Dsldo1GWkGGG0Y3jYfI%3D\"}]}\r\ncf-ray: a248edddf92c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11639,"size_decoded":2755,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11638)","md5":"e0841c76478e6f5cfb6f77449b58afbe","sha1":"5f6c2ba9e42347beef484a795b0068bf9d9c891e","sha256":"aba9e03e2afa7d518ec48f1e13838d7ea7b0f98774c1a30bdb51de3af283d21e","sha512":"9b9ab9f6f96c87a41ea4d330b5b0183d8053e042ab256348afde6c334db9bd0afe71f7d34a6965e155d22a677aae203467f3c5c417e73a7b1e9254b0129d9ee4","ssdeep":"192:+cbTNdcP2Rfg0MxGrY5jlJSBTVbgad/rHj3LPthkMIKzIg33HZYuUIAz8lkt:+c/y2RzuGc5jlYBTVbgO/rHj3LPthkMK","tlshash":"5e323884b520dabeaa76133a4dc37151720d1f9fe58bb591b1edc81a27d99f0b008b7c","first_seen":"2026-08-02T00:23:08.056712Z","last_seen":"2026-08-02T03:13:58.170051Z","times_seen":4,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/ContainerForm-4e418d51.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.464Z","timestamp":1785630156464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/ContainerForm-4e418d51.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 24 Sep 2025 07:57:28 GMT\r\npriority: u=2,i=?0\r\netag: \"68d3a468-2b\"\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=671gpyLtPNElWohlwXt5ycULu9hvVsw6iQ%2BvMfAucTn0RsmbP7jPqWH3tZjRi1NtVAxNa%2BTdspsasJeEbYfEx8Ww9eIqlaEUNIH0WveR6SfpAVcrD6zAifxiIpP0a60C7m8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a248eddde92056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":767,"mime_type":"text/css","magic":"ASCII text","md5":"210bc0aef74b653b3356a9a9b785006d","sha1":"b77ab851a4963c96af01c55e7dafb33240202fdc","sha256":"4e418d51c9ed84b3998be57770f4d38289e5e8d86351b032b91fd304eedd2a49","sha512":"dc96806e9bdb062655a1d74a5b387b0d13121d6d4a427c31a5af4c23daf6378dd5073e051dca208189f335e6a31088d3149d6cb9d0503f6e27dde66172eb67ea","ssdeep":"","tlshash":"429002441980647ab501919d255402150604a84b84404e65a014595051d15f60051a58","first_seen":"2023-11-09T00:35:11Z","last_seen":"2026-08-11T19:56:20.330021Z","times_seen":230,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/BaseMainBtn.vue_vue_type_style_index_0_lang-fe075ad6.js","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.466Z","timestamp":1785630156466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/BaseMainBtn.vue_vue_type_style_index_0_lang-fe075ad6.js HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a6b25da-22d\"\r\nlast-modified: Thu, 30 Jul 2026 10:22:18 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVRKq9zvk49lrDhme2RZLVe7kiKZn%2FfZsiS%2BakLBxpgDkSz2Rlxa2xIoE%2BXs0IKK6Q2Aj215%2FHdfTnLbWpjEE7w7A6Vtwxf0c59w%2B8p%2BazNfWoiyBIMTLm52qmRe7L0bFBg%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248eddde92156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":1099,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (556)","md5":"c7a7a8056a028b2a793178d0251768df","sha1":"7acb2be712e55e1b6f6933bf06265cb60d8a9dfd","sha256":"b6ae01a104f6cb19527a2975797d0443e3160217de104088cd0e9dd9e6710329","sha512":"1611c450ca7e16f9264722ae8329f2128242d914f2f93051222a4b4304d407dc48f801afd1a81a44260eb3c4721e22aba0e19db9a30a78298bbea8c7c756f8cc","ssdeep":"","tlshash":"77f020049c01c6bc0cef010a2215212452042a2fc31468f895cf623c479e0b1b46971c","first_seen":"2026-08-02T00:23:08.06019Z","last_seen":"2026-08-02T03:13:58.168905Z","times_seen":4,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.2026ee.shop/assets/index-d56192c0.css","fqdn":"www.2026ee.shop","domain":"2026ee.shop","tld":"shop"},"ip":{"addr":"172.67.154.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.2026ee.shop/","date":"2026-08-02T00:22:36.473Z","timestamp":1785630156473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2026ee.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 04:24:01 GMT","end":"Fri, 30 Oct 2026 05:22:25 GMT"},"fingerprint":{"sha1":"CB:5D:66:A3:42:21:DE:5E:3F:09:50:2E:47:4A:63:BD:C1:4B:77:AD","sha256":"C3:69:8D:52:98:4F:4F:6E:FB:1D:57:36:F9:EB:22:19:80:5E:45:AD:D9:6E:C2:20:8F:E1:8C:3C:54:D7:16:C7"}}},"request":{"raw":"GET /assets/index-d56192c0.css HTTP/1.1\r\nHost: www.2026ee.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.2026ee.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 00:22:36 GMT\r\ncontent-type: text/css\r\netag: W/\"68d3a468-3d\"\r\nlast-modified: Wed, 24 Sep 2025 07:57:28 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 02 Aug 2026 12:22:36 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4g1RE43YkYkp0u08%2BPXuvvqWC7RTRhKaR%2FRaIwV7UL7AAEn8dqPFuo0ajFnj%2BDx7N6vhcP9DD1eSDG7RungIKY4TOSIXICFaCNiIZiZ8SmhZh4ZrzsWTslczZ1%2FJ7xM1vw%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a248edddf92656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":782,"mime_type":"text/css","magic":"ASCII text","md5":"186fb1b7bcf7b4484422f657a2d0a66a","sha1":"bac6f21e45e86ce5fc7ae63485ff8f0ae004176d","sha256":"d56192c060bf7a99d3f3b4c0423b887037f7f99353920242b8cd8ef520a8fb62","sha512":"b552c8d0495770108a31d5ac0dfeedce31e5b9b6f0cee914031774bed544000fccbc690024c355019e86c314e59667b3c32635ceb95fa4e1c7372cd280a523a9","ssdeep":"","tlshash":"60a0026249545e641a9240820d8407578434c1044a136e6dd4b99d1a2cce4810e534dc","first_seen":"2024-06-07T16:46:44Z","last_seen":"2026-08-11T19:56:20.311427Z","times_seen":190,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-02","alert":"Sinkholed","trigger":"www.2026ee.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-02","alert":"Phishing Block","trigger":"www.2026ee.shop","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}