{"report_id":"f65556a6-8fe7-4078-be4d-763ccee2ba1e","version":6,"status":"done","tags":[],"date":"2026-02-14T04:48:13Z","url":{"schema":"https","addr":"ifscdjs.com/","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"104.21.69.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ifscdjs.com/","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"title":"X Wallet | AI-Powered Crypto Trading","dom":{"size":70293,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1130)","md5":"a5650f2f04d06bc91f321fd0be967822","sha1":"ac776a8d38d167cf913220656606fb01765a0cb6","sha256":"4ac435c60a1378bf45cc7de65e659410dd3389bc165c17507a6c1e2def56b046","sha512":"bc37640d7149b61994942952885dcc3a68cdf7fad46833e0b8305192643a444957ec80a922dd897496a2858c9cf3be0b5de976951795a12c9bab1561ecab2135","ssdeep":"768:9K/E192TshxdtQO6OOAhkGQQ1kASeT76WJQizQ:c/29C5OAbyr7RJe","tlshash":"9663517061fa2136909352e7b7661b2b3fa9e143d54a410477ac0fe84fd7e82ec2b56c","dom_hash":"domhashfef26440030a8b03f78a91ad34eb21b7","first_seen":"2026-02-14T04:48:15.007106Z","last_seen":"2026-02-14T04:48:15.007106Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ifscdjs.com/","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"104.21.69.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:48:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ifscdjs.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-02-13T14:28:32.7871Z","last_seen":"2026-02-13T14:28:32.7871Z","alert_count":56,"request_count":14,"received_data":213518,"sent_data":6764,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ifscdjs.com/js/main.js","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa28007b5f7a73db43073d2890b7efdf","sha1":"07b0ace54120749b2a9b722050c688eee60b6552","sha256":"8b9ceb263bb81d5ef09d7810a98835303d4d81c83bd6993352c0c5e4e1d3136e","sha512":"e1555e8f52e64199e911caee60e68964142baf767cf489728a3bddd5816b076f96fd8f80181ca3554a1867b0e64e2aa9ba71a3cc3b29efb3e07dbebbb27f088c","ssdeep":"384:gXYuKBph6NREliDUM/fQT3JeSkufGXMafJIxw0fFeZNcjy:gXPKBv6NREl5M/sFfGXTfJIxPgNcjy","tlshash":"ead2a52a22f734374da315be834b52493b3750436445cd563e6d87881f82f91adb3ae9","size":28329,"data":"","first_seen":"2026-02-13T14:28:37.015629Z","last_seen":"2026-02-14T04:48:15.033033Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"610fccfda5657ff467d3c354c7358620","sha1":"0343895b0c8c5f4a51377ac923096093ca1f1dd6","sha256":"89190884cbf5c50a64b8fa758768ff3147061a64decaf4677fcf5710004e2434","sha512":"ae52e103f80b24f89223a2d96fb7816984e4d8b0b2e226250d5e3a4808d0b853ce7ec130abf834860d59bc021edc3f0ab9aec3e01eae8f607f2e66a8ba90f7f9","ssdeep":"192:OSPBProhCyOe8yrGLp7GYSRUbQ76JsJtDl8/amQ5O2LBpzjMWhFRCyd/KrAF7pJr:OSJTnaxL176JsJt58/av5O0HjMWbbjN","tlshash":"5a42711521b720214db737bbe3c766183b24b0033406c9683a9d8b840fd1f5869bfaee","size":12174,"data":"","first_seen":"2026-02-13T14:28:37.027501Z","last_seen":"2026-02-14T04:48:15.035948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/trx.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/trx.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:30 GMT\r\netag: W/\"1ad-19bf0989761\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkzphKD1yVqAXLF0jRwHGpy94DbyYr5Gla9HUleoDBQnAO5CqxX3dxqalQ6Hs7vJpMHm4wL1w6%2BSz6zlCYiAznwXJIAgDEd32%2FRD\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee139c90a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e61dfd0a444ac582c5abf4c384c4b5b","sha1":"f887034ce8eaf887b3c531c6ce50e1317009885b","sha256":"5b6b648320b6e99b8e60d447271f753dc9989183e3a07f0300ee44d0743130f0","sha512":"b64e3404dd34b9ece56f39bbb1cb3d706bfbe5637e79cc3a13b5d88880c97a53f10af2a23f3f864615fe5ca1bd8623a0942e6a827d99804d11673a93b7ffe376","ssdeep":"","tlshash":"06e08a90ac742706c9cece0808187470304da09ddd0c6dfc71e02704e1511c71805bfc","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-08-03T02:57:10.419043Z","times_seen":4220,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:47:52.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\nset-cookie: _vid=vid_7c1d1145; Max-Age=63072000; Path=/; Expires=Mon, 14 Feb 2028 04:47:52 GMT; HttpOnly\n_sid=sess_61ec770f; Max-Age=1800; Path=/; Expires=Sat, 14 Feb 2026 05:17:52 GMT; HttpOnly\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdxNUMG5ovt78tjVNoSeOkF0RbsbBNAEfb5EjqMHJKv%2B5FIDJ08Jm5bwV%2FAqUDT4u%2BdFOVDxMndNXw4r4GqJAKX2B%2FdqaYQBvIbi\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee0f9a92a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":69622,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1124)","md5":"97322e14498fcec1d4e1e365f73bb9a9","sha1":"6965ee46935f77ac20ff05bf21c3c7510589cc7f","sha256":"e8676ee83011f192ba388f70eb0d45b57e82b827c9939c70f43f0e9d57448b40","sha512":"8108fcf0987f2b7394971c5a880ea63a41c861b8b29a4ec16b7a1911ad843d655245bc524f0d5615ace4ed0dddadf221c43f074bec13c684a0dcdb322bfcc7ed","ssdeep":"384:RbbtEZyQRZ2eLYJK8QV3h9OkQRceGu8tRi3M+H5HZKkOnaSJTnaxL176JsJt58/j:RVEdf2esJNeh9ONRRGoLSeT76WJQizQ","tlshash":"3363517052fa2132419392e7b7561b3b3fa9e543d64a410436ac0fe81fd7d86ec2b5ac","first_seen":"2026-02-13T14:28:37.01799Z","last_seen":"2026-02-14T04:48:15.013502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":62,"dns":41,"connect":1,"send":0,"wait":322,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/css/styles.css?v=1769519992933","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /css/styles.css?v=1769519992933 HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 27 Jan 2026 13:06:39 GMT\r\netag: W/\"115d3-19bff90331c\"\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bd7WciMKtu43cpL8N0nWKrHo5%2B3k1s1Zs2X5poa4xgBzJeLudQ3JNIdVKrTFLvtwZwGewxijaks2w5uNVlpqqAZfpgyzGdYRczGf\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee136c77a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":71123,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"19ea5ec93a81cb20ce66e1d097af18db","sha1":"21afa880ac8de78b252279e6b4864ab2f0521b72","sha256":"888e3c165d33acb1246c294f61491337495a1a776dbf6a4a89e08b90eced5989","sha512":"8615a6f5791448fdaf0cf977933ca391b8d7731c961449c7b4857d46abc8620791dd9614f3f9f8aa6e1b227df5f25a4140bbd63e3fe73f05b53ebb973cccc3fd","ssdeep":"1536:qoUH1QctBiZfRtVv21o1TmT1TkPvOmPNagKfO5iUugVgyK7gj:DMA","tlshash":"b063248666731965781ba9b86bff9796332ca043810ecd797fcc214c4f893e85562f8c","first_seen":"2026-02-13T14:28:37.008341Z","last_seen":"2026-02-14T04:48:15.016141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/usdc.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/usdc.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:24 GMT\r\netag: W/\"5ae-19bf0988076\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lRpq1ulpXbN8srDpUOBicDVFiW4TnZM3KiXufLY4jnW9yhpPvN32oezwTEtI6rfeOqVMxBOfF3M3CGK1IPcb5YEEBnsCN%2BD4RHW\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee137c88a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1454,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bc59a3a2071fd7c268ebdb58658e588","sha1":"84c6c5b0793fd20959241d88a38915ee48feff7f","sha256":"7281e8cadfe9abc14e98b15b05cdc24cc24d68533a51e746141d4d98f2ca2bc8","sha512":"90b9371c1b18516488673440e20316bc9cd09cabb3c37104e8a89befac06194a513704cfb415cbe4d545cfef666390d62797b105cd69e56868da94ba494306bd","ssdeep":"","tlshash":"b73162c6b1703714b89bcb46dfb1a9d4238f94bf1afac2c162cc8b0cd08ea917208d10","first_seen":"2025-09-17T18:10:57.098012Z","last_seen":"2026-08-03T02:57:10.418459Z","times_seen":4118,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/sol.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/sol.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:27 GMT\r\netag: W/\"24d-19bf09888e5\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=18ooF1DIh%2BlRiznxinOq6XpD7GeqAVKm7B6ZVUmTLUcC%2B2KQsz8WbZnLOXV4p1rBOjJL8X8gJW%2FI0tesoDXlyS8UrS98xWH3UPTE\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee138c8aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f48b6e8a88f7b0aa4b6598aa7715465","sha1":"93e573e9f1376bf17af2ac11f136c597a5eed82f","sha256":"94e47e7c108a338cc4a79b82673d66cfbadfcf4c934ccb9c2ca8f13e8ea7dbb2","sha512":"0a7981504e74f5fef2b3526fb5be81692c5362e01b17fb49c068a2f2c3744c9cab65562a71d6feb837ac360fe290310e43ae3a83a79ab0e1056f4ec0d6653a89","ssdeep":"","tlshash":"91f046e2a15cf5cee04cdd1a24cfb11238a13047f07be4d0bb892684f88b0c7ba04e64","first_seen":"2024-11-08T20:22:57.120472Z","last_seen":"2026-08-01T04:37:03.762628Z","times_seen":4651,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/eth.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/eth.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:23 GMT\r\netag: W/\"20d-19bf0987b2e\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtCTM0400wvyxL4JuWt7stYSy61z9t8fn0GYsJ6lOboOUj1F96Jo34cOeKQoieTtZ4lSAkN2xtsFfskTbFHzC0opt%2Bm6LZsher9f\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee137c86a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed79179a3b6bc2c2ee4c54d8ade79b01","sha1":"14b7148647a28eb4f861f8da283a89f0acf1dec8","sha256":"1f94df8533f61806f7b17eaf9cd28678cdba66e1d82a9ca8f9fb38d35a907e9c","sha512":"590a8fde3f1bcac91ccd4dc2cc02f7ba602cc4b15f137c1f3758bcc5072c545167f7dae4c16837bde366561fd08ffdbfe5a087dee8f7e75feaec9ecc77a2fc8b","ssdeep":"","tlshash":"a5f08be95d287450682b1ffce67c98d3306771f40a3d0cf9b1800512e94995b9cd2b40","first_seen":"2023-05-10T14:51:47Z","last_seen":"2026-08-03T02:57:10.426348Z","times_seen":4294,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/bnb.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/bnb.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:29 GMT\r\netag: W/\"1f9-19bf0989371\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1yuHMT6FQvhZgA%2F4BXgKF1gheHkJgRTeWgF6Z1qaJEdDS%2BbdILokVjiEg0UZSi1oS10WdmZFQ0ulhMzsHyZgpBZqv37xs009OOI\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee138c8ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":505,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2626df36e7822f2ca4b9cef986fa3c12","sha1":"0735b15f9f11df0dd5ef41218184fe3b5304977a","sha256":"ce2befc91baa544c13b63d6c02a12cfcf84702a5ec29b650e358a8b4a96c4ce8","sha512":"73b7c52d38d25635c157ba5eb8f11206442d1164f1ca7df3501d086a40c0a40f492bf18a9e3ed8a3f0a891b3d3da8dbfc8f1152114b1d6f5b323a3f111dd3b7c","ssdeep":"","tlshash":"1ef059d888247e10ce062d58ef3ffc2304573425094a7de2e25a9b16fd589ddf885e14","first_seen":"2024-08-19T21:48:13.537326Z","last_seen":"2026-08-03T02:57:10.42376Z","times_seen":4750,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/x-logo.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/x-logo.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 27 Jan 2026 12:10:45 GMT\r\netag: W/\"102-19bff5d0816\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMCmTLcRcbSPNvfmC55f%2BmwstuyOQI2W%2FCoy5hdvLoxN0kPj3T5hD9XWGNdzOmW2OCQpczm379gUGdrPyx5FePWJKaRBOMYZamDU\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee137c7ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":258,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55aaa4fd0fc615cb25221b89ac288873","sha1":"03d404b599a173c3789a28be31f0f6b93d58b6a9","sha256":"6103d52a8c52d86b760055bd6d868ea71c7702b29c463e10f08939c943a89dda","sha512":"0802c6be2a158605bfe92b8bc6191138cf5cf65d3fb22f9dd99d81f13a07280754f2f504821a5cc4e5a17bbebfa3180f5609ac857407a4d3751713a6ed2d7dc6","ssdeep":"","tlshash":"b3d02bc1674c5a9094068a11dd54774a227a30d0108941cbdbbce66a956088d8d05968","first_seen":"2026-02-13T14:28:37.003945Z","last_seen":"2026-02-14T04:48:15.024936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/doge.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/doge.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:25 GMT\r\netag: W/\"2e2-19bf09883da\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAGN%2FDisB2Ob3e3vp6%2FK%2FfRdgUQ9l6FLnjkISQd3jmAB%2BgPHPc9nGb3RIkhY2EgnBUwa4CipfXy15Cta9N64BlSYisKBy%2FpPVchA\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee139c8fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f63ff3991035fa33ea36c34360fca8d","sha1":"572803b168b53512b4b16c480ef42a37efb3d3e6","sha256":"bad8366eea35df4e3185ba24aeaedf4b5ab702d1bb959de47085fb762916d16f","sha512":"2074ae0a5778ce23fa2a3b429b90cde646859b811f991007d81cca0a992fa6a9ffdc844488a2e052e8fb21299a7bbef0e337011c303626ce3078daf98c60b494","ssdeep":"","tlshash":"f60125d79e28e5cc0cef4934bf773088161b7b9f910a49e2518d4e09f4821d8e402e50","first_seen":"2025-05-18T01:44:37.295907Z","last_seen":"2026-07-27T06:45:09.774799Z","times_seen":208,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/usdt.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/usdt.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:23 GMT\r\netag: W/\"288-19bf0987c8c\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DM9y8QxiwoPZZBfq2ynE9Sw%2BzbUNjTDO5flyRxnxx4WQ9cfc8z94yM1lhMuns9ctCfQxa9CqFcb7HH23Gq9Rye8Jb2rNlWP9Exd%2F\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee137c87a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f07b8f90c0eff1b76b402a2d34f0cdbe","sha1":"62c5226fbfa6a8f3c68c0e4f23f9c4bfeb05c299","sha256":"cddba428a029844888b59bae59c6400ee684b0d51dfc490a4374eef6bb63ea16","sha512":"63f9bb75b191310dc2d3e5840ddf0da27d72b2b1ad6000ca8bf1a3fd0c2562b14b25537d567de37f87ed2c64df288b363b5cfaa11e3f0fa53a17a9667ac40235","ssdeep":"","tlshash":"d4f073da6630d5c04862ca7eef7f1f89296b20e7615d0686f07a6e0ef4430d5705559c","first_seen":"2023-09-24T21:42:29Z","last_seen":"2026-08-03T02:57:10.417254Z","times_seen":4199,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/xrp.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/xrp.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:21:28 GMT\r\netag: W/\"18f-19bf0988cf9\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0J5fnlRLHq8V8fclNtSTUSmgc7vm5IrJZmjiPD6wuyt8tpKht3PbS89xhA2IUgLFKo5tFELAU3c0GObYNRpLI1TWdMXcKQJfc0Kq\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee138c8ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84ce7542e288e2bf98a4da4dbde2594e","sha1":"e85496f0cf50b2158de788a0d87319e28dc9837b","sha256":"31fe41b6b3a4d98c9b46d7c37d60dea97fa5d9ebbd235ac5bfe23e4fd1eb8361","sha512":"5ab148cf574017486cc40e9f9ab0c94fb8065021114e4c226523c8aaf5ee6c97874c0dffe4dc843223454f1c8a1a94f8189acf2a2e091afe3181257a35bafcea","ssdeep":"","tlshash":"bee0aba935f4d405448a8ea9d52a30802011a11e3159067ab040f619f8a30e72c05ce8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-08-01T04:37:03.69764Z","times_seen":4301,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/css/ai-trading.css?v=1769519992933","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /css/ai-trading.css?v=1769519992933 HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 27 Jan 2026 13:13:57 GMT\r\netag: W/\"6ed2-19bff96e323\"\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9K%2FoiTZsyTR2VA%2FL2cWAFFGoFAJOod%2FsJWustCM0HC4zDRbvVXAMxihGMsOM8vr5ZY7uuF7PWbBjXaaOW2wNh2sBbQSTdAlCpaL6\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee137c7ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":28370,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"d0955007bdaaceb979e80eb594c48a22","sha1":"51f8be8c57199bf1acc71ade7a4901d6225080b0","sha256":"64aa13ce2e51edbb8da680800415fe20ac301a2b9a5dac3379fb21fb8f9fb266","sha512":"bf264d9259d35dd74c2f18f3f29f48216af3c2b09e5b810c79325dec14c0ff82f20e9aab580d1aae9a558ddfcdeb5f2bcaa607c7496cab3fa5b8816d6df2170a","ssdeep":"768:QfjTFc3xeT3+k93Y/N7iFXgwTg97ghyKFgYY:yn7+k93Yl2FXgwTg97g0KFgL","tlshash":"b3d2138767a31a00b41bd8a96ff7d34a336c9043810ec96d3f8e715c8f8d1d995a2b8c","first_seen":"2026-02-13T14:28:37.010975Z","last_seen":"2026-02-14T04:48:15.030214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/images/coins/btc.svg","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /images/coins/btc.svg HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 24 Jan 2026 15:20:45 GMT\r\netag: W/\"3b9-19bf097e56f\"\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nvtUePYMiPYpKUuiYpQFxUR1lQtqjMc8dfXKjZNbpW7IEgPwR4JmYfmhh1O%2FA6eMPPG%2FLx0JEkuEEesgQblXFHYIdZV27r8hG40\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee137c84a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edae64fcb50f425e582a9a1429784b70","sha1":"cdcd71434b3e179f57627bda3625ae61240715c3","sha256":"5a8131ecdf855b12cb56080aeeeefea266976529c45b2d58c284a13b7519f4ca","sha512":"8313b5900bbb90d04597b74d7bed7cd1c4cf9c52718a939eb996e531e37b74dc55ba787171eec6cbecbc524bae28cce5376065324dab6b5f8c1ce250ecc5c964","ssdeep":"","tlshash":"511154de16749548699f8d2cff2bbc463012f1bcd52e9ce49aff6d4470c2ae13140914","first_seen":"2023-07-08T18:24:36Z","last_seen":"2026-08-03T02:57:10.422235Z","times_seen":4315,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ifscdjs.com/js/main.js","fqdn":"ifscdjs.com","domain":"ifscdjs.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifscdjs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:37:05 GMT","end":"Wed, 22 Apr 2026 13:35:49 GMT"},"fingerprint":{"sha1":"A1:B9:AE:6B:B8:B9:7B:40:35:7E:5D:97:25:B3:CB:1D:AE:A2:4B:DB","sha256":"76:48:D7:03:06:27:65:A2:E9:F4:8C:4D:ED:FD:B8:EE:7E:15:2F:79:E1:5D:08:E5:4C:63:85:0C:57:AD:CF:40"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: ifscdjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nCookie: _vid=vid_7c1d1145; _sid=sess_61ec770f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:47:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 27 Jan 2026 12:10:36 GMT\r\netag: W/\"6ea9-19bff5ce58d\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BJAncK9mYskik4W%2BofCYKoxK%2BQZL4NBAepEF2BnEBgpPlDk2XUDMl1AJRm4kCPq%2BdY4y5Hlw%2FDd89fVG9aVf6%2F50wkBsbbqv%2Bt%2Fk\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd9ee139c92a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":28329,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"fa28007b5f7a73db43073d2890b7efdf","sha1":"07b0ace54120749b2a9b722050c688eee60b6552","sha256":"8b9ceb263bb81d5ef09d7810a98835303d4d81c83bd6993352c0c5e4e1d3136e","sha512":"e1555e8f52e64199e911caee60e68964142baf767cf489728a3bddd5816b076f96fd8f80181ca3554a1867b0e64e2aa9ba71a3cc3b29efb3e07dbebbb27f088c","ssdeep":"384:gXYuKBph6NREliDUM/fQT3JeSkufGXMafJIxw0fFeZNcjy:gXPKBv6NREl5M/sFfGXTfJIxPgNcjy","tlshash":"ead2a52a22f734374da315be834b52493b3750436445cd563e6d87881f82f91adb3ae9","first_seen":"2026-02-13T14:28:37.015629Z","last_seen":"2026-02-14T04:48:15.033033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ifscdjs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ifscdjs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ifscdjs.com/","date":"2026-02-14T04:47:52.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ifscdjs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 04:47:53 GMT\r\ndate: Sat, 14 Feb 2026 04:47:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-08-03T09:20:48.265577Z","times_seen":15171,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":143,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
