{"report_id":"f7be5ec1-2fa3-4466-91d1-b32dc31d7b61","version":6,"status":"done","tags":[],"date":"2025-11-18T22:03:12Z","url":{"schema":"http","addr":"4get.ca/instances","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"4get.ca/instances","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"title":"Instance browser","dom":{"size":10252,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10250), with no line terminators","md5":"179f023c06093a7a1820153bbf0bbc34","sha1":"b3ffe23b097deed4083176687183aaa9dbcafa26","sha256":"3621276312e07c553c62b3e6d0b765f7e014938bf61a8ad27e2450149e6a9431","sha512":"a9e11609d470f4afe3ee849f6762b188887a259238e2a37442151921abd8b346c654d6943319094f497fa040d329d271820fd949369830484fdf3b13edcfdb86","ssdeep":"192:xwZWVlCdSlUGka1TaUSE044EyUckuhkOkMgWEk4schtEdJzJAFtqBxognPncuHDv:xiWVAMN1GUeMEraF1gfK34T","tlshash":"3d226ba1c2e5c837066250ef8666be9dd0c151b8dbf10f449e9e8debeac5db1390314b","dom_hash":"domhash8e466c13a5fa07ed6278cb272dbdd364","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"4get.ca/instances","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-23T22:03:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T22:02:51Z","timestamp":1763503371,"ip_dst":{"addr":"172.18.0.22","port":45558,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.145.40.181","port":443,"asn":58212,"as":"dataforest GmbH","country":"Germany","country_code":"DE"},"severity":"medium","alert":"ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 394","source":"{\"timestamp\":\"2025-11-18T22:02:51.493670+0000\",\"flow_id\":758465136639614,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.145.40.181\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":45558,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.TorIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2522393,\"rev\":5970,\"signature\":\"ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 394\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2008_12_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TOR\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-11-18T22:02:51.474750+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T22:02:51Z","timestamp":1763503371,"ip_dst":{"addr":"45.145.40.181","port":443,"asn":58212,"as":"dataforest GmbH","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":45572,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-11-18T22:02:51.557072+0000\",\"flow_id\":1336529080014519,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45572,\"dest_ip\":\"45.145.40.181\",\"dest_port\":443,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.TorIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"4get.lunar.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2678,\"start\":\"2025-11-18T22:02:51.513719+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T22:02:51Z","timestamp":1763503371,"ip_dst":{"addr":"51.79.54.208","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"ip_src":{"addr":"172.18.0.22","port":51958,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-11-18T22:02:51.751810+0000\",\"flow_id\":1594983031977511,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":51958,\"dest_ip\":\"51.79.54.208\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"4get.aishiteiru.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":2678,\"start\":\"2025-11-18T22:02:51.538151+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.lurx.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.perennialte.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"4get.edmateo.site","ip":{"addr":"158.247.124.83","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Colombia","country_code":"CO"},"domain_registered":"2024-04-20","domain_rank":0,"first_seen":"2025-02-19T11:31:24.27439Z","last_seen":"2025-06-04T20:27:44.250599Z","alert_count":0,"request_count":1,"received_data":1233,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"4get.nigga.pt","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.zzls.xyz","ip":{"addr":"38.45.72.78","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2021-06-07","domain_rank":0,"first_seen":"2023-08-28T19:06:22Z","last_seen":"2025-06-04T20:27:35.993811Z","alert_count":0,"request_count":1,"received_data":193,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"search.milivojevic.in.rs","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-01","domain_rank":0,"first_seen":"2025-06-04T20:27:43.863272Z","last_seen":"2025-06-04T20:27:43.863272Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.lumaeris.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-06-27","domain_rank":0,"first_seen":"2024-09-10T12:09:26Z","last_seen":"2025-06-04T20:27:37.354517Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4getus.zzls.xyz","ip":{"addr":"38.45.72.78","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2021-06-07","domain_rank":0,"first_seen":"2023-12-18T14:46:26Z","last_seen":"2025-06-04T20:27:35.189821Z","alert_count":0,"request_count":1,"received_data":195,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4get.lunar.icu","ip":{"addr":"45.145.40.181","port":443,"asn":58212,"as":"dataforest GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2022-01-18","domain_rank":0,"first_seen":"2025-05-12T02:03:45.205083Z","last_seen":"2025-06-04T20:27:37.046303Z","alert_count":0,"request_count":1,"received_data":1241,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4get.dcs0.hu","ip":{"addr":"176.63.157.63","port":443,"asn":21334,"as":"Vodafone Hungary Ltd.","country":"Hungary","country_code":"HU"},"domain_registered":"2021-09-26","domain_rank":0,"first_seen":"2025-02-19T11:31:22.510303Z","last_seen":"2025-09-13T02:42:22.840369Z","alert_count":0,"request_count":1,"received_data":963,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"4get.sudovanilla.org","ip":{"addr":"172.223.182.221","port":443,"asn":20115,"as":"CHARTER-20115","country":"United States","country_code":"US"},"domain_registered":"2023-10-27","domain_rank":0,"first_seen":"2024-02-11T17:26:56Z","last_seen":"2025-06-04T20:27:38.162562Z","alert_count":0,"request_count":1,"received_data":655,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"4get.datura.network","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-06-16","domain_rank":0,"first_seen":"2024-02-10T16:54:17Z","last_seen":"2025-06-04T20:27:36.297166Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.tux.pizza","ip":{"addr":"45.61.184.135","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"2022-05-02","domain_rank":0,"first_seen":"2025-02-19T11:31:21.330799Z","last_seen":"2025-06-04T20:27:38.403601Z","alert_count":0,"request_count":1,"received_data":1199,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]},{"name":"PHP:8.4.3","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"4get.turtlecute.org","ip":{"addr":"168.231.108.37","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"domain_registered":"2022-07-14","domain_rank":0,"first_seen":"2025-06-04T20:27:36.061603Z","last_seen":"2025-06-04T20:27:36.061604Z","alert_count":0,"request_count":1,"received_data":1849,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4get.kizuki.lol","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-12-16","domain_rank":0,"first_seen":"2024-02-01T23:42:05Z","last_seen":"2025-06-04T20:27:37.544928Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4g.ggtyler.dev","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-06-30","domain_rank":0,"first_seen":"2025-02-19T11:31:24.602294Z","last_seen":"2025-06-04T20:27:35.615231Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.seitan-ayoub.lol","ip":{"addr":"172.237.146.38","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-08-09","domain_rank":0,"first_seen":"2023-12-15T11:36:18Z","last_seen":"2025-06-04T20:27:36.307089Z","alert_count":0,"request_count":1,"received_data":5347,"sent_data":430,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.snine.nl","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-03-07","domain_rank":0,"first_seen":"2024-03-05T02:10:11Z","last_seen":"2025-06-04T20:27:38.388004Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.lvkaszus.pl","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-10-05","domain_rank":0,"first_seen":"2024-02-29T17:16:09Z","last_seen":"2025-06-04T20:27:37.762334Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.neco.lol","ip":{"addr":"154.38.167.42","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"domain_registered":"2024-01-30","domain_rank":0,"first_seen":"2025-02-19T11:31:24.288123Z","last_seen":"2025-06-04T20:27:35.24977Z","alert_count":0,"request_count":1,"received_data":2149,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"search.fzorb.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-06-29","domain_rank":0,"first_seen":"2025-02-19T11:31:22.364077Z","last_seen":"2025-06-04T20:27:37.15797Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.f24o.zip","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-26","domain_rank":0,"first_seen":"2025-02-03T08:11:02.759563Z","last_seen":"2025-06-04T20:27:37.245579Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.kuuro.net","ip":{"addr":"38.45.72.79","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2025-06-30","domain_rank":0,"first_seen":"2025-11-18T22:03:12.993363Z","last_seen":"2025-11-18T22:03:12.993364Z","alert_count":0,"request_count":1,"received_data":454,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"4get.aishiteiru.moe","ip":{"addr":"51.79.54.208","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2024-01-08","domain_rank":0,"first_seen":"2024-02-25T07:42:22Z","last_seen":"2025-06-04T20:27:36.58924Z","alert_count":0,"request_count":1,"received_data":1329,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.9","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"4get.lol","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-04-16","domain_rank":0,"first_seen":"2021-05-15T23:16:48Z","last_seen":"2025-06-04T20:27:35.793313Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":417,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.hbubli.cc","ip":{"addr":"85.215.128.243","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2023-03-12","domain_rank":0,"first_seen":"2023-11-15T17:25:43Z","last_seen":"2025-06-04T20:27:38.025966Z","alert_count":0,"request_count":1,"received_data":1461,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4get.ca","ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"2022-05-07","domain_rank":1874407,"first_seen":"2023-07-01T22:17:14Z","last_seen":"2025-11-12T18:34:40.906104Z","alert_count":5,"request_count":5,"received_data":37136,"sent_data":2168,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"4get.lurx.net","ip":{"addr":"192.3.85.205","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1165,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]}]},{"fqdn":"4get.konakona.moe","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-09-12","domain_rank":0,"first_seen":"2023-10-14T11:03:43Z","last_seen":"2025-06-04T20:27:35.155736Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.ducks.party","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-06-08","domain_rank":0,"first_seen":"2025-02-19T11:31:23.540594Z","last_seen":"2025-06-04T20:27:35.396828Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.getcobalt.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-16","domain_rank":0,"first_seen":"2024-09-25T16:52:59Z","last_seen":"2025-06-04T20:27:36.041464Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.ngn.tf","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-11-01","domain_rank":0,"first_seen":"2025-02-19T11:31:24.167745Z","last_seen":"2025-06-04T20:27:36.076987Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":417,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.psily.garden","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-12-09","domain_rank":0,"first_seen":"2025-02-19T11:31:21.832615Z","last_seen":"2025-06-04T20:27:37.826327Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.plunked.party","ip":{"addr":"104.21.86.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-11","domain_rank":0,"first_seen":"2023-11-16T02:05:32Z","last_seen":"2025-06-04T20:27:36.982225Z","alert_count":0,"request_count":1,"received_data":1553,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"search.fischbytes.de","ip":{"addr":"5.45.109.190","port":443,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-18T22:03:14.497791Z","last_seen":"2025-11-18T22:03:14.497791Z","alert_count":0,"request_count":1,"received_data":485,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"4get.ch","ip":{"addr":"5.196.26.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":5357318,"first_seen":"2024-03-01T21:46:56Z","last_seen":"2025-06-04T20:27:38.636278Z","alert_count":0,"request_count":1,"received_data":1200,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]}]},{"fqdn":"4get.perennialte.ch","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2023-11-10T13:57:16Z","last_seen":"2025-06-04T20:27:44.945602Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":428,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.nadeko.net","ip":{"addr":"200.14.81.226","port":443,"asn":270013,"as":"J AND J SPA INFOFRACTAL","country":"Chile","country_code":"CL"},"domain_registered":"2024-01-09","domain_rank":0,"first_seen":"2025-11-18T22:03:12.97946Z","last_seen":"2025-11-18T22:03:12.97946Z","alert_count":0,"request_count":1,"received_data":3721,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"search.mint.lgbt","ip":{"addr":"186.105.29.250","port":443,"asn":7418,"as":"TELEFONICA CHILE S.A.","country":"Chile","country_code":"CL"},"domain_registered":"2020-07-03","domain_rank":0,"first_seen":"2022-05-29T21:05:14Z","last_seen":"2025-06-04T20:27:35.61921Z","alert_count":0,"request_count":1,"received_data":1157,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"4get.dorfdsl.de","ip":{"addr":"82.139.252.17","port":443,"asn":8820,"as":"tal.de GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-02-19T11:31:24.521517Z","last_seen":"2025-06-04T20:27:38.164654Z","alert_count":0,"request_count":1,"received_data":1214,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"4get.thebunny.zone","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-08-16","domain_rank":0,"first_seen":"2025-02-19T11:31:22.932864Z","last_seen":"2025-06-04T20:27:36.186371Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.umbrella.haus","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-20","domain_rank":0,"first_seen":"2025-02-19T11:31:21.335441Z","last_seen":"2025-06-04T20:27:38.145645Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":424,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4.nboeck.de","ip":{"addr":"65.109.167.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-02-20T13:45:01Z","last_seen":"2025-06-04T20:27:36.278672Z","alert_count":0,"request_count":1,"received_data":1170,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"4get.hackliberty.org","ip":{"addr":"93.95.228.245","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"domain_registered":"2022-05-10","domain_rank":0,"first_seen":"2025-06-04T20:27:35.398117Z","last_seen":"2025-06-04T20:27:35.398117Z","alert_count":0,"request_count":1,"received_data":617,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"search.yonderly.org","ip":{"addr":"162.81.48.53","port":443,"asn":33566,"as":"KUB-FIBER-01","country":"United States","country_code":"US"},"domain_registered":"2024-05-14","domain_rank":0,"first_seen":"2022-07-14T12:18:41Z","last_seen":"2025-06-04T20:27:44.294333Z","alert_count":0,"request_count":1,"received_data":1165,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenBSD httpd","description":"","website":"https://man.openbsd.org/httpd.8","common_platform_enumeration":"cpe:2.3:a:openbsd:openbsd:*:*:*:*:*:*:*:*","icon":"OpenBSD httpd.svg","categories":["Web servers"]}]},{"fqdn":"4get.twipler.space","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-07-11","domain_rank":0,"first_seen":"2024-10-07T11:59:53Z","last_seen":"2025-06-04T20:27:36.103989Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":427,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.canine.tools","ip":{"addr":"15.204.212.115","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":2134,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]}]},{"fqdn":"4get.etenie.pl","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-06-26","domain_rank":0,"first_seen":"2023-09-16T14:54:36Z","last_seen":"2025-06-04T20:27:37.762787Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"4get.silly.computer","ip":{"addr":"64.99.147.199","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"United States","country_code":"US"},"domain_registered":"2021-11-13","domain_rank":0,"first_seen":"2025-06-04T20:27:36.308485Z","last_seen":"2025-06-04T20:27:36.308485Z","alert_count":0,"request_count":1,"received_data":1181,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"4get.sijh.net","ip":{"addr":"172.67.182.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-18","domain_rank":0,"first_seen":"2023-07-31T01:13:58Z","last_seen":"2025-06-04T20:27:37.405404Z","alert_count":0,"request_count":1,"received_data":1508,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T22:02:51Z","timestamp":1763503371,"ip_dst":{"addr":"172.18.0.22","port":45558,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.145.40.181","port":443,"asn":58212,"as":"dataforest GmbH","country":"Germany","country_code":"DE"},"severity":"medium","alert":"ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 394","source":"{\"timestamp\":\"2025-11-18T22:02:51.493670+0000\",\"flow_id\":758465136639614,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.145.40.181\",\"src_port\":443,\"dest_ip\":\"172.18.0.22\",\"dest_port\":45558,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.TorIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2522393,\"rev\":5970,\"signature\":\"ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 394\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2008_12_01\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TOR\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-11-18T22:02:51.474750+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T22:02:51Z","timestamp":1763503371,"ip_dst":{"addr":"45.145.40.181","port":443,"asn":58212,"as":"dataforest GmbH","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.22","port":45572,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-11-18T22:02:51.557072+0000\",\"flow_id\":1336529080014519,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45572,\"dest_ip\":\"45.145.40.181\",\"dest_port\":443,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.TorIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"4get.lunar.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2678,\"start\":\"2025-11-18T22:02:51.513719+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-18T22:02:51Z","timestamp":1763503371,"ip_dst":{"addr":"51.79.54.208","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"ip_src":{"addr":"172.18.0.22","port":51958,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO INFO .moe Domain in TLS SNI","source":"{\"timestamp\":\"2025-11-18T22:02:51.751810+0000\",\"flow_id\":1594983031977511,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":51958,\"dest_ip\":\"51.79.54.208\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2827579,\"rev\":7,\"signature\":\"ETPRO INFO .moe Domain in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2017_08_17\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Moderate\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"4get.aishiteiru.moe\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":2678,\"start\":\"2025-11-18T22:02:51.538151+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"4get.ca/static/serverping.js?v8","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"984d7c03017e344a7e984865b8239c55","sha1":"237672106fa353f4aa32fd1a0189ab71ba31c89f","sha256":"67aeb279bdd8c6d71fdb08059691d182b3802cda4299b6683e7102ff914cc7a8","sha512":"6507cde189369e1953a508b1a2fe37c03f0b04567e872585234b0807a50eb2497d37f4e95dadde5b440782ccd1761c40891cdfcde8336cca859de736cc779e22","ssdeep":"192:spncmVPwaXiGtSeMUnzsm0ZGxafQ2CrvYVJO6gfG3L63GEoKUFX7SdFgIamVahi5:sprPwaXLcUnAm0ZGx3gJO6KPgRmVahi5","tlshash":"aa229159e38d644f56ea0147462e60a6fabcd13298084ca27f0cc05d7db0e9b61ff9ac","size":10561,"data":"","first_seen":"2025-02-19T11:31:28.875678Z","last_seen":"2025-11-18T22:03:53.434069Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"4get.lumaeris.com/ami4get","fqdn":"4get.lumaeris.com","domain":"lumaeris.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.066Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.lumaeris.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":84,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"search.fischbytes.de/ami4get","fqdn":"search.fischbytes.de","domain":"fischbytes.de","tld":"de"},"ip":{"addr":"5.45.109.190","port":443,"asn":197540,"as":"netcup GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fischbytes.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Sep 2025 13:16:52 GMT","end":"Sun, 14 Dec 2025 13:16:51 GMT"},"fingerprint":{"sha1":"6A:4D:1E:CD:D5:11:F8:15:88:9E:A9:FB:0B:6E:1A:81:9F:C8:D5:D5","sha256":"9D:8C:62:13:25:49:70:4A:A2:20:88:E6:2A:12:D5:5B:A5:6E:74:48:A1:0E:CD:92:16:D0:1C:B2:F3:0C:53:03"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: search.fischbytes.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 271\r\nserver: Apache/2.4.65 (Unix)\r\nx-powered-by: PHP/8.4.5\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":271,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"af1301326ac8a4b1952ed15ee6d4e2b8","sha1":"3d0a6d9c723693abcc6df041ef40791baa893343","sha256":"575ecfe1893562eea1f866d33c71261ce757dea7377fa7f84bd4532af17cf0a0","sha512":"b8660556d8fa1874c4f716dd822a9b89872712e066614d41ec1a7ee9ea2f4d2729f65b15cbaa5fa09f0802db2c2ee34bd5f06e44c47600483c4d8c6a1f3f2359","ssdeep":"","tlshash":"18d02b55570568f74fb186e00c517e06b5b859e2247d07100f9c817d032a4f964abc5b","first_seen":"2025-11-18T22:03:53.429803Z","last_seen":"2025-11-18T22:03:53.429803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1318,"timings":{"blocked":117,"dns":67,"connect":22,"send":0,"wait":1077,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.silly.computer/ami4get","fqdn":"4get.silly.computer","domain":"silly.computer","tld":"computer"},"ip":{"addr":"64.99.147.199","port":443,"asn":32133,"as":"AS-TING-BACKBONE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.silly.computer","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Oct 2025 01:15:02 GMT","end":"Wed, 07 Jan 2026 01:15:01 GMT"},"fingerprint":{"sha1":"1E:E9:EE:EF:80:66:C7:CA:9B:7D:D6:B8:C3:2C:69:43:C2:64:62:DD","sha256":"C8:8A:DD:3B:EC:2B:A0:AF:B4:E4:8F:64:C1:11:86:54:4A:AF:B3:6C:D0:7B:BC:FA:09:22:52:21:A5:A1:1F:00"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.silly.computer\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Tue, 18 Nov 2025 22:02:51 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":978,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6438692deb3fb6c08e608331efdda773","sha1":"29530d88dcaa370a27c365de519047b26cb45567","sha256":"7de714f38ff775bc2704b8aec1b55625c2c968da1ca9f80cad0189c79fdddbb0","sha512":"dbc0f66d472244b40acdd1f22acbcbb7da0774da6363b28735dc06be00a8f7df0a1b88682bc61a6c0b68ccfd496d842ce14b8347057c89c6a8930c3e5454e850","ssdeep":"","tlshash":"b81150f7f001da6b02d003e2483a3a7da2e3301b2c55cb964f5dc66885010f0ac6f8b7","first_seen":"2025-02-19T11:31:28.887738Z","last_seen":"2025-11-18T22:03:53.431401Z","times_seen":4,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":263,"dns":54,"connect":101,"send":0,"wait":99,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.hbubli.cc/ami4get","fqdn":"4get.hbubli.cc","domain":"hbubli.cc","tld":"cc"},"ip":{"addr":"85.215.128.243","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.hbubli.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 21:19:40 GMT","end":"Wed, 11 Feb 2026 21:19:39 GMT"},"fingerprint":{"sha1":"01:81:B6:B2:93:E1:4F:0F:B9:2A:50:D8:F0:BE:9D:D2:D1:DD:68:E0","sha256":"1F:0C:CC:03:F6:A3:D8:E0:4A:BB:17:7F:AA:D0:F8:6F:BC:96:01:44:46:B3:29:FB:38:59:D1:CD:52:39:E4:5C"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.hbubli.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.2.29\r\naccess-control-allow-origin: *\r\nvary: Cookie\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=15768000\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-robots-tag: noindex, nofollow\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1022,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f281c9eeccacb9453a3e08963b570947","sha1":"b3a52191ab7aa3c8b5b4c89ba4674df96b59f074","sha256":"e6c69710387af0850bcf12dfb0bc561e4b1fd2f39cb165e0ec1eecbd37fb8747","sha512":"1f9da3e8623f7f46b02e3763fc049351749b86b705314cb424d0616527338a3a57936842eb50ffb55e38928a864ab75c37bee37f8d6faf125c33e206ef18a733","ssdeep":"","tlshash":"891162f7f601da6b42d003f258293a7d96e7305b6c1487620f1dc66999000f5ac6f8b7","first_seen":"2025-11-18T22:03:53.433343Z","last_seen":"2025-11-18T22:03:53.433343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":69,"dns":14,"connect":31,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.ngn.tf/ami4get","fqdn":"4.ngn.tf","domain":"ngn.tf","tld":"tf"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.485Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4.ngn.tf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.kizuki.lol/ami4get","fqdn":"4get.kizuki.lol","domain":"kizuki.lol","tld":"lol"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.747Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.kizuki.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.ca/static/serverping.js?v8","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4get.ca","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:8F:23:95:4E:E0:1D:85:44:C9:D1:F2:1C:0B:C8:52:4A:47:2C:47","sha256":"8B:C3:53:AC:59:69:91:4D:09:D8:B4:23:89:7A:E6:60:6D:46:22:65:D9:99:B3:C4:A7:EE:2F:21:5D:5A:FB:A8"}}},"request":{"raw":"GET /static/serverping.js?v8 HTTP/1.1\r\nHost: 4get.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4get.ca/instances\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 16 May 2024 21:25:01 GMT\r\netag: \"2941-61898de200540\"\r\naccept-ranges: bytes\r\ncontent-length: 10561\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-type: text/javascript\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10561,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"984d7c03017e344a7e984865b8239c55","sha1":"237672106fa353f4aa32fd1a0189ab71ba31c89f","sha256":"67aeb279bdd8c6d71fdb08059691d182b3802cda4299b6683e7102ff914cc7a8","sha512":"6507cde189369e1953a508b1a2fe37c03f0b04567e872585234b0807a50eb2497d37f4e95dadde5b440782ccd1761c40891cdfcde8336cca859de736cc779e22","ssdeep":"192:spncmVPwaXiGtSeMUnzsm0ZGxafQ2CrvYVJO6gfG3L63GEoKUFX7SdFgIamVahi5:sprPwaXLcUnAm0ZGx3gJO6KPgRmVahi5","tlshash":"aa229159e38d644f56ea0147462e60a6fabcd13298084ca27f0cc05d7db0e9b61ff9ac","first_seen":"2025-02-19T11:31:28.875678Z","last_seen":"2025-11-18T22:03:53.434069Z","times_seen":4,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4get.ch/ami4get","fqdn":"4get.ch","domain":"4get.ch","tld":"ch"},"ip":{"addr":"5.196.26.3","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.ch","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 10:40:12 GMT","end":"Sat, 31 Jan 2026 10:40:11 GMT"},"fingerprint":{"sha1":"D4:CC:73:38:2D:D4:D0:00:95:E5:75:A0:B5:C5:9C:08:79:4E:D5:DB","sha256":"E1:10:F5:9D:1C:3A:1B:F0:D1:1A:E9:C7:5C:9E:31:E4:35:D4:53:41:11:DF:AF:F3:79:3F:C8:73:1C:11:BC:DB"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nserver: Caddy, Apache/2.4.65 (Unix)\r\nx-powered-by: PHP/8.4.5\r\ncontent-length: 947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]}],"data":{"size":947,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"76003e454f870b6b83e0b53931d798ca","sha1":"3ed7636dc3f5d762078efe4cc4a2c2a403edd8d2","sha256":"25d8a26a2c2e55560dbda15d640569f6e9796393afc68a44c241bd093b130f68","sha512":"ec5d1fa7c4be11803c45156ebad17b25d3fff82146d1cfe5906f25941258229ef2a8bdc3a564440d058d89f9635ff7502a4099992ec298601b77959b6244b44b","ssdeep":"","tlshash":"1e112df7f4019aab42d003f248393a7d96eb201b6c15c7960f5dc66985000f59c6f8bb","first_seen":"2025-11-18T22:03:53.435259Z","last_seen":"2025-11-18T22:03:53.435259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":39,"connect":34,"send":0,"wait":35,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.kuuro.net/ami4get","fqdn":"4get.kuuro.net","domain":"kuuro.net","tld":"net"},"ip":{"addr":"38.45.72.79","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kuuro.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Oct 2025 21:42:30 GMT","end":"Sun, 11 Jan 2026 21:42:29 GMT"},"fingerprint":{"sha1":"AB:BD:D9:F5:98:8E:F2:2A:F6:FC:8A:B6:67:98:7D:25:EA:3E:EC:DB","sha256":"2F:45:07:0D:8C:47:CF:61:B6:54:04:5B:E5:CE:38:D4:5B:D7:C3:8D:8C:3D:11:C7:1D:39:3F:B5:39:40:A9:A9"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.kuuro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 418 I'm a teapot\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\nonion-location: http://4g.kuu7oukh73yy4pn5iahfnm3k6vppyseqtt6xn3xs33big5cnlv2fr5yd.onion/ami4get\r\nserver: Caddy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 115\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"418","status_text":"I'm a teapot","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":115,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"be764078ca5f4e35d65e646cd2b32d14","sha1":"39654c0ee1c037cf2941f159e5a9590d3298c6be","sha256":"f151d6298e1bae2d55650d5eaac2c858c0085b2f5a6d69bae1c1910bd60daa6f","sha512":"ea94a522c996abe4aabf3df8135403d63908368ee469cc640cc1a346c1201f8441e8494c695d6ef294b14fa5f37628973c27e2529ea80a744ac9fe4c71b6a9e3","ssdeep":"","tlshash":"e9b012889f0cc41410610206da33f21c355a00f91847dc07ff9f611029045c7d936c76","first_seen":"2025-11-18T22:03:53.436055Z","last_seen":"2025-11-18T22:03:53.436055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":129,"connect":124,"send":0,"wait":118,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.lurx.net/ami4get","fqdn":"4get.lurx.net","domain":"lurx.net","tld":"net"},"ip":{"addr":"192.3.85.205","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.lurx.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 18:37:11 GMT","end":"Wed, 14 Jan 2026 18:37:10 GMT"},"fingerprint":{"sha1":"87:34:25:76:1F:6A:CA:C7:75:55:21:5C:51:03:AA:DC:64:7A:46:EB","sha256":"40:47:EC:D6:88:56:51:36:13:C5:9D:62:8D:E5:29:DB:3C:1F:43:13:99:B3:B4:49:9E:72:FE:16:7C:8B:73:34"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.lurx.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\nserver: Apache/2.4.65 (Unix)\r\nvia: 1.1 Caddy\r\nx-powered-by: PHP/8.4.5\r\ncontent-length: 903\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]}],"data":{"size":903,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55554840b56b671b6feb9582de9ac3ee","sha1":"b78f4f3d71ef26d2b8bd2330fdd8e0b6b2a52c9e","sha256":"5bb95c6eb8f016069e97250fc2c3bd4ccbc2f8c17019636bbe394be625623c8b","sha512":"697e4f404c7c6eed3c75f48cfd1ea89cb496ccb4b2e396583e2a10bfa4b7c4f7191dd9bf843e4e9d23a5df03e7c7096d80a6f5b75afadfc4580303a6d8f1e01d","ssdeep":"","tlshash":"d1111df7f1419a6b42d003e248393a7de2eb211b2c55cb964f5dcb6985004f1a86f8b7","first_seen":"2025-11-18T22:03:53.436874Z","last_seen":"2025-11-18T22:03:53.436874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":-1,"dns":142,"connect":167,"send":0,"wait":214,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.lurx.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4getus.zzls.xyz/ami4get","fqdn":"4getus.zzls.xyz","domain":"zzls.xyz","tld":"xyz"},"ip":{"addr":"38.45.72.78","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadeko.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 13:58:20 GMT","end":"Tue, 23 Dec 2025 13:58:19 GMT"},"fingerprint":{"sha1":"3C:79:C6:6E:74:6B:04:D8:6F:39:29:D1:AB:4B:DF:ED:FC:FF:03:67","sha256":"D7:3B:C9:77:AF:D8:AE:F8:7E:4A:DB:F7:7C:31:F1:79:F8:C8:46:CA:EE:A6:19:46:27:D2:FD:D1:78:F6:69:ED"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4getus.zzls.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://4getus.nadeko.net/ami4get\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":56,"connect":117,"send":0,"wait":117,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.psily.garden/ami4get","fqdn":"4get.psily.garden","domain":"psily.garden","tld":"garden"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.749Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.psily.garden\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.umbrella.haus/ami4get","fqdn":"4.umbrella.haus","domain":"umbrella.haus","tld":"haus"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.069Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4.umbrella.haus\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.ca/static/style.css?v8","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4get.ca","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:8F:23:95:4E:E0:1D:85:44:C9:D1:F2:1C:0B:C8:52:4A:47:2C:47","sha256":"8B:C3:53:AC:59:69:91:4D:09:D8:B4:23:89:7A:E6:60:6D:46:22:65:D9:99:B3:C4:A7:EE:2F:21:5D:5A:FB:A8"}}},"request":{"raw":"GET /static/style.css?v8 HTTP/1.1\r\nHost: 4get.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4get.ca/instances\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sat, 22 Jun 2024 13:59:10 GMT\r\netag: \"4b33-61b7af3c50780-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-length: 4341\r\ncontent-type: text/css\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c2509669a0d63409cd70771f7e2e3c6","sha1":"7f1f338837683695390d8ef38c1afffec9618856","sha256":"0e20d8317f4047b681d962a5a8c95d71d0bed5c2016004c3c7885109b941661b","sha512":"87b41349d31761a0bb86eca130e620609163e4c0455d51699ea7d90e2c454dd27aa2693018d57a6484a6259655952ddc1fe521d1034731cde98d988e5c559769","ssdeep":"192:BR7+Xiz+ycaQ654+B5n222wtDfOfsUaF5lQBWTJrP38fBW5AI43pMZc2axmvCE:BRi8caNpB5n222wp0fwWadvB","tlshash":"8682b5a79b223c64a42fe119af4ce65c7a2db096ee1f4fd6fc68642cc2c95d51123d0c","first_seen":"2024-08-19T14:20:08.469392Z","last_seen":"2026-03-24T17:15:30.802272Z","times_seen":13,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4get.lunar.icu/ami4get","fqdn":"4get.lunar.icu","domain":"lunar.icu","tld":"icu"},"ip":{"addr":"45.145.40.181","port":443,"asn":58212,"as":"dataforest GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lunar.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 05 Sep 2025 16:08:46 GMT","end":"Thu, 04 Dec 2025 16:08:45 GMT"},"fingerprint":{"sha1":"95:2E:50:DD:8A:1A:CC:F7:55:8B:8C:84:62:78:73:D2:B9:06:3D:06","sha256":"B2:D3:A6:19:D6:3F:3E:64:5F:CB:1B:BD:03:F6:A5:68:8C:FA:13:1F:48:80:45:FB:04:D6:B2:E4:93:B5:52:F7"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.lunar.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 18 Nov 2025 22:02:51 GMT\r\nContent-Type: application/json\r\nContent-Length: 868\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.4.5\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":868,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31e03a91fe204a92d5ab69d75a9e933c","sha1":"8cfcb062dd48557ed12ff26cfddc19dc1aaf9f80","sha256":"075dfdde3d4bb9a3638742e0e0628c2935d6343df49f11fad4c8529ee666faab","sha512":"b42b2519932fdce2082d25de6fd6d2ebb578e6a6ecfcbed48c2d17d94af76fe4ce532233defed45aa32deaff1c2268df1cdf7b94b969c9c7f8009fe31900a4c8","ssdeep":"","tlshash":"851122f7f145daab42d003e288283a3d92ab20532c15db520f5dc63985110f5a86f4b7","first_seen":"2025-11-18T22:03:53.438233Z","last_seen":"2025-11-18T22:03:53.438233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":58,"connect":58,"send":0,"wait":20,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.aishiteiru.moe/ami4get","fqdn":"4get.aishiteiru.moe","domain":"aishiteiru.moe","tld":"moe"},"ip":{"addr":"51.79.54.208","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.aishiteiru.moe","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 17:10:38 GMT","end":"Mon, 29 Dec 2025 17:10:37 GMT"},"fingerprint":{"sha1":"F1:F9:9D:D9:FD:31:1A:B6:E2:34:F7:D9:BC:F9:60:03:51:B0:AF:91","sha256":"83:BE:D1:DA:EF:C9:C0:A6:22:32:04:22:22:E5:E9:66:96:21:50:E8:C0:CC:B7:93:FA:49:98:18:70:5D:47:C4"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.aishiteiru.moe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 1129\r\nx-powered-by: PHP/8.3.9\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.9","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55d2a959ca299f6dce8464dc29812bd8","sha1":"d20c33243e0e22ec55d39e689db89fb2970b89a5","sha256":"0a09c044aacf0e5d4da4abcdc2a093f422be9691ba68f39027de0527bab7b5f5","sha512":"77c4fd43fce60fa50e5c9d7717376f0b533e3fcb0859f47f1aada93828f4d5ecdc7d29f11061db4116ae773fc3eeae3259e37b8de38a46be4ce1d786e91df255","ssdeep":"","tlshash":"1d2193f6f441da6b42d043f2082d3a7ddae631272d54cba24f1dc66996000f1a86f8b7","first_seen":"2025-11-18T22:03:53.438975Z","last_seen":"2025-11-18T22:03:53.438975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":67,"connect":104,"send":0,"wait":105,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4.nboeck.de/ami4get","fqdn":"4.nboeck.de","domain":"nboeck.de","tld":"de"},"ip":{"addr":"65.109.167.97","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4.nboeck.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 02:14:59 GMT","end":"Sat, 10 Jan 2026 02:14:58 GMT"},"fingerprint":{"sha1":"29:FF:D8:A2:54:E5:81:BA:FD:AF:68:74:46:06:80:AD:B6:B7:A6:EC","sha256":"CC:30:6B:94:F1:54:E9:C5:7F:81:30:72:E0:31:4F:81:01:AF:E7:0F:F3:6B:49:61:7F:1F:0B:91:DA:7B:B1:3B"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4.nboeck.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nserver: Apache/2.4.65 (Unix)\r\nvia: 1.1 Caddy\r\nx-powered-by: PHP/8.4.5\r\ncontent-length: 908\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":908,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"76e6771f65cc9d7d1044b61c46445ba6","sha1":"6af30fb8b521e81cf949dbc8a4cbdf568c905a0d","sha256":"daec60785ad6ae8c96f497bd62253a0bf692ec42aac7e4757e1b800feace6d3c","sha512":"bfdabffaf0e2f0c9bf6909614504220fabbf88fbac01ba8867b8dddb439060d97e2f16320ba868a62633accebf1de38916ef8e5a2a5e298330cd1a6d66d41157","ssdeep":"","tlshash":"23114df7f140da6b42d003e248393a3d92eb301b2c55c7524f5cc66885000f1a86f8bb","first_seen":"2025-11-18T22:03:53.439768Z","last_seen":"2025-11-18T22:03:53.439768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":47,"connect":28,"send":0,"wait":29,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.hackliberty.org/ami4get","fqdn":"4get.hackliberty.org","domain":"hackliberty.org","tld":"org"},"ip":{"addr":"93.95.228.245","port":443,"asn":44925,"as":"1984 ehf","country":"Iceland","country_code":"IS"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hackliberty.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 05:12:38 GMT","end":"Wed, 24 Dec 2025 05:12:37 GMT"},"fingerprint":{"sha1":"88:B3:04:EF:9D:83:3B:99:1A:8C:69:0B:09:CB:03:B4:EE:92:FA:2D","sha256":"37:3C:FF:35:F7:03:DA:AD:DE:C1:BD:3B:DA:9D:39:AA:F0:72:F0:02:D4:8A:5E:FD:E4:0E:FE:88:44:EC:93:36"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.hackliberty.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 250\r\nx-powered-by: PHP/8.4.5\r\naccess-control-allow-origin: *\r\nonion-location: http://yorxfx5huderjzsotrgni5qy4brrtx6h73vf37tkmzemjtkya3atd7qd.onion/ami4get\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e2b1566f1996390515222f05e319f4ed","sha1":"f641f1ed8375622b3ca4e95b9e45a304335946da","sha256":"34b5a40738fd55ae622ec479ef7d60fdcadf68192572550b7f12b0c768d463b3","sha512":"b4c61198652d816a4376398c8ddc940f65edacf19bab321e76730df528a73e037987d7946684e7a1ae34d81d4d5ea46bd44b785e5c104b417376abed7b4a8110","ssdeep":"","tlshash":"20d02b5685089cf90ba0853008227c1381bc45a3146919108d9cc11d423607558a381f","first_seen":"2025-11-18T22:03:53.440503Z","last_seen":"2025-11-18T22:03:53.440503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":136,"connect":55,"send":0,"wait":56,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.konakona.moe/ami4get","fqdn":"4get.konakona.moe","domain":"konakona.moe","tld":"moe"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.741Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.konakona.moe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4g.ggtyler.dev/ami4get","fqdn":"4g.ggtyler.dev","domain":"ggtyler.dev","tld":"dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.743Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4g.ggtyler.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.perennialte.ch/ami4get","fqdn":"4get.perennialte.ch","domain":"perennialte.ch","tld":"ch"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.perennialte.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.perennialte.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4get.ca/instances","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-18T22:02:50.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4get.ca","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:8F:23:95:4E:E0:1D:85:44:C9:D1:F2:1C:0B:C8:52:4A:47:2C:47","sha256":"8B:C3:53:AC:59:69:91:4D:09:D8:B4:23:89:7A:E6:60:6D:46:22:65:D9:99:B3:C4:A7:EE:2F:21:5D:5A:FB:A8"}}},"request":{"raw":"GET /instances HTTP/1.1\r\nHost: 4get.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-length: 969\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 18 Nov 2025 22:02:50 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4483,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4481), with no line terminators","md5":"637aef7602351230cd6d522730e0387c","sha1":"2430ef0ce3ba00b2cf1a5fea26b0066784774c21","sha256":"e9b68469bba8a3eed31349e0d5517926f46a3de4dcd634903cae07d8d2cbd739","sha512":"dd7422cc89453ed7a3d48439f28f3b3ea091642992a61998859c395a3503e561ea9fb9c42572e54d81a373d2a6e0b88ec77198319a6930490f80231ffc6fbdae","ssdeep":"96:TxwlHdhyVlCdSlU8ka1TaUSE044EyUckuhk1wkMgWEk4schZm8S:9wZWVlCdSlU8ka1TaUSE044EyUckuhkg","tlshash":"f69123e386d059bb079211ff9a227bdda1d201bccef91d48dc995e52cb00eb2291324f","first_seen":"2025-11-18T22:03:53.441255Z","last_seen":"2025-11-18T22:03:53.441255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":499,"dns":1,"connect":94,"send":0,"wait":97,"receive":0,"ssl":402},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4get.plunked.party/ami4get","fqdn":"4get.plunked.party","domain":"plunked.party","tld":"party"},"ip":{"addr":"104.21.86.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plunked.party","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 17:50:57 GMT","end":"Fri, 02 Jan 2026 18:49:32 GMT"},"fingerprint":{"sha1":"CB:B8:64:08:06:77:64:E9:95:4F:81:D0:27:74:7A:51:71:D1:14:C1","sha256":"31:BB:79:B4:B7:EB:C7:E9:95:8D:B8:9E:AA:35:DC:B3:ED:87:E9:C4:F3:81:30:FA:F8:D7:B4:D9:5C:80:00:64"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.plunked.party\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-powered-by: PHP/8.3.27\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2Bf%2F%2B5xAhegtKKCuGw5HnOqdYLDV0%2FlJ0KrE4kSotasnsp2UkYkXpD%2F59MWFJVwGxiUmqOH0wS%2FQx1jFy8NNPib6pEMX1ySXImkUCF3C%2F%2Bg47A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9a0ac127be8b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.27","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":946,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5acb7f806fb484fee4997de52993bf75","sha1":"85d0fb75aac512f892e4353d878e5eae7ce39099","sha256":"c031f717d0e531e879f413775c4ff68d8a60600299f5d281cbcae1e33275f3d4","sha512":"730b0b1bd4b757c488c0a75093edd2a0cb2e1ef24e46e174eb82aa8fb0b5f18fc35bcd9e7a54551b224b8c1eab560cefa4dca6961ac87eed1379ef9ae89e7d4f","ssdeep":"","tlshash":"ea113ff7f404daab42e003e648393a7d92e2311b2c5587970f5dc66986014f5ac6f8b7","first_seen":"2025-11-18T22:03:53.442045Z","last_seen":"2025-11-18T22:03:53.442045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":38,"dns":28,"connect":1,"send":0,"wait":414,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.dcs0.hu/ami4get","fqdn":"4get.dcs0.hu","domain":"dcs0.hu","tld":"hu"},"ip":{"addr":"176.63.157.63","port":443,"asn":21334,"as":"Vodafone Hungary Ltd.","country":"Hungary","country_code":"HU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dcs0.hu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 00:12:39 GMT","end":"Wed, 11 Feb 2026 00:12:38 GMT"},"fingerprint":{"sha1":"3A:B3:D5:D0:9A:95:43:FA:4E:8D:14:91:E8:6C:42:C4:3C:46:BC:69","sha256":"ED:FE:73:13:B0:B4:54:44:10:1C:37:CD:A1:21:D1:63:5B:4F:4D:25:1C:BE:41:C5:2B:48:72:6A:CB:B5:D1:0C"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.dcs0.hu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 723\r\nlast-modified: Tue, 27 May 2025 21:47:40 GMT\r\netag: \"683632fc-2d3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":723,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text","md5":"4e97439284bf89f939f9205aba582710","sha1":"e2bc939fbd665847ac5220c8cbce39c77db27aee","sha256":"72159573e5f2ac9ceca9824c766bb62dfa8976a384819888e020fa60d6fbd086","sha512":"a19f4d2e6597008e91494b63c0c69a7184d64cebc6b717f4776cdcea6420046af59d7018a3446095c018c69f0a486410133ba25566c441fdb567cbe5a5289a35","ssdeep":"","tlshash":"b0019c97187d79679df0cc314f175174891aabd6311de8b0481cf98c1482438a53fd09","first_seen":"2025-11-18T22:03:53.442717Z","last_seen":"2025-11-18T22:03:53.442717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":35,"connect":50,"send":0,"wait":50,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.sudovanilla.org/ami4get","fqdn":"4get.sudovanilla.org","domain":"sudovanilla.org","tld":"org"},"ip":{"addr":"172.223.182.221","port":443,"asn":20115,"as":"CHARTER-20115","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sudovanilla.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 23:04:46 GMT","end":"Sun, 25 Jan 2026 23:04:45 GMT"},"fingerprint":{"sha1":"DC:3E:CF:DF:7E:8F:37:9C:C8:BF:9C:22:28:A2:B9:4C:93:D6:C5:43","sha256":"BF:FB:99:A6:0B:A6:D2:C8:03:D0:A8:99:22:E2:99:B9:DA:42:B9:BE:C1:0C:0E:E8:7D:9D:4B:F8:AA:6C:EE:BF"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.sudovanilla.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 18 Nov 2025 22:02:51 GMT\r\nContent-Type: application/json\r\nContent-Length: 408\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.4.5\r\nAccess-Control-Allow-Origin: *\r\nX-Served-By: 4get.sudovanilla.org\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":408,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dc8bc9bb03b3711aab95e3e07a2b747d","sha1":"3b536badf63998442388dc36b6591ad35d7aa02e","sha256":"96d2d30569210ddac7964441e8f19f269232a64a6cff0f7a36dca9ec9851beb0","sha512":"9dd3c3f576fa859c854c2dbb43fb041ec1c0403dcda7c64c12aafe926e9353c351e6cc522e4ca84a6225e6b9fe49b16dad3dcafd4f1709b9a85aed6f13eeaca4","ssdeep":"","tlshash":"09e0ab3bf694a8ff0b90c2a51c177d0523fc05e2083542052e8dc52e07120981b52c7f","first_seen":"2025-11-18T22:03:53.44351Z","last_seen":"2025-11-18T22:03:53.44351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":49,"connect":123,"send":0,"wait":129,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.seitan-ayoub.lol/ami4get","fqdn":"4get.seitan-ayoub.lol","domain":"seitan-ayoub.lol","tld":"lol"},"ip":{"addr":"172.237.146.38","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.seitan-ayoub.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 20:27:40 GMT","end":"Tue, 27 Jan 2026 20:27:39 GMT"},"fingerprint":{"sha1":"C4:2D:90:2C:97:D1:05:A3:E1:25:0A:69:D2:E4:DD:64:94:57:94:65","sha256":"91:30:F9:D5:1E:0B:0D:57:48:86:16:49:45:BE:0C:A1:A3:F5:4F:9B:A3:EF:99:A9:A3:4A:5E:A2:CA:0C:B3:DE"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.seitan-ayoub.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\ncontent-type: text/html\r\ncache-control: no-store, max-age=0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua=(self \"https://*.parklogic.com\"), ch-ua-arch=(self \"https://*.parklogic.com\"), ch-ua-bitness=(self \"https://*.parklogic.com\"), ch-ua-full-version=(self \"https://*.parklogic.com\"), ch-ua-full-version-list=(self \"https://*.parklogic.com\"), ch-ua-mobile=(self \"https://*.parklogic.com\"), ch-ua-model=(self \"https://*.parklogic.com\"), ch-ua-platform=(self \"https://*.parklogic.com\"), ch-ua-platform-version=(self \"https://*.parklogic.com\"), ch-ua-wow64=(self \"https://*.parklogic.com\")\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4469,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (4469), with no line terminators","md5":"e736add7bd4e45db0b30bbe972c263c0","sha1":"210b9544352a21557d312342c1a59b98a30abf76","sha256":"38ddfe785b59987ba081a79e9939e455d3b17d26569da38b3906374a63f02841","sha512":"b2613706c3122af1d4155ab21e70b84c9ec441ae3754f2f3a9ac5791a75cf648448765c181919d65921962fb24128368c36e69846036f7181db4c7dcd6513e00","ssdeep":"96:nItDJYtoAJS8ffKH1NPIX4rDIcQ0ucq4o5nZmZtnTI7BmaL:IVJYtoA1ffqzr/IcQ0ybmL0oaL","tlshash":"ff9119317786302d9be414ea947fab28763ed205340b4072e769fcd13c20a9b9096fd5","first_seen":"2025-11-18T22:03:53.444271Z","last_seen":"2025-11-18T22:03:53.444271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":87,"connect":105,"send":0,"wait":110,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.snine.nl/ami4get","fqdn":"4get.snine.nl","domain":"snine.nl","tld":"nl"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.751Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.snine.nl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.datura.network/ami4get","fqdn":"4get.datura.network","domain":"datura.network","tld":"network"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.752Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.datura.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.ducks.party/ami4get","fqdn":"4get.ducks.party","domain":"ducks.party","tld":"party"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.758Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.ducks.party\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.ca/favicon.ico","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4get.ca","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:8F:23:95:4E:E0:1D:85:44:C9:D1:F2:1C:0B:C8:52:4A:47:2C:47","sha256":"8B:C3:53:AC:59:69:91:4D:09:D8:B4:23:89:7A:E6:60:6D:46:22:65:D9:99:B3:C4:A7:EE:2F:21:5D:5A:FB:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 4get.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://4get.ca/instances\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 16 May 2024 21:25:01 GMT\r\netag: \"c1-61898de200540\"\r\naccept-ranges: bytes\r\ncontent-length: 193\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":193,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"26e7c324d7e0bdf2086ceab8bacc09e5","sha1":"16773ba900474a96cc59435a0de89b9d813dd505","sha256":"b8fb4aa47baed327a5537d558d24a12fb099a45152be2cf7f72e6a6a50caaf0e","sha512":"e48ab47a4404305d06eb9516de718ad4a6c761897143c38cdb47aac91b30c8e83f8e4e82117370cdc43fb07129419af3864ee8839c1aec60fd8f364beb1db60b","ssdeep":"","tlshash":"afc080d70b98cc32d9db25335676c168dde92d7c97fb5091140a9c230d0de64f4aa753","first_seen":"2024-05-27T10:02:35Z","last_seen":"2026-04-09T21:09:35.601014Z","times_seen":22,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4get.sijh.net/ami4get","fqdn":"4get.sijh.net","domain":"sijh.net","tld":"net"},"ip":{"addr":"172.67.182.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sijh.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 00:20:59 GMT","end":"Wed, 24 Dec 2025 01:19:27 GMT"},"fingerprint":{"sha1":"F0:64:F2:56:64:06:B5:28:6C:A7:95:EC:9B:7B:71:84:99:2E:60:BF","sha256":"E9:A3:75:F6:77:4D:2A:36:AA:28:57:9C:FC:48:04:08:67:46:36:CA:DC:98:23:C6:66:FD:32:C9:22:26:C8:07"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.sijh.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BqqwT1WtxZWlojshh3X1xssKjecrW0tNI0pcSmOjJZE5Pa1S8giFrILAvafFb09J9QBYYff96N1%2FefYqX%2B0YnKEHRbrZ1Dy9Mcs\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9a0ac1279d27712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"380403586b115c2e85b781293d76efde","sha1":"dbc2f1cc53e34a01079e0139b18c3f9629ac11f9","sha256":"ed9fe886d50d2d220cc398b15a925aa6c387591e9b90030a74d553582169067d","sha512":"71246da5fd6327ff57b26db69c5d27c6f98a151d6fd972fac35d109bed799b5a2bc21e6b794cc307e4a73129d341f0933759c26c7b1efc2545876519d4c5f350","ssdeep":"","tlshash":"7c113ff7f141da6b42d003e248393a3d96eb201b2c15db664f5cc67999410f0acaf8bb","first_seen":"2025-11-18T22:03:53.446169Z","last_seen":"2025-11-18T22:03:53.446169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":17,"dns":8,"connect":1,"send":0,"wait":132,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.edmateo.site/ami4get","fqdn":"4get.edmateo.site","domain":"edmateo.site","tld":"site"},"ip":{"addr":"158.247.124.83","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edmateo.site","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 07:02:11 GMT","end":"Tue, 30 Dec 2025 07:02:10 GMT"},"fingerprint":{"sha1":"53:16:5F:F3:6F:2E:93:DB:17:73:A3:20:88:32:63:19:24:64:D7:6B","sha256":"F9:D3:BE:84:FC:73:3F:EB:A7:6A:62:08:58:90:3A:28:BE:D5:0E:70:8E:1E:5E:8A:6E:23:55:B2:2C:32:78:7B"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.edmateo.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 22:02:52 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 428\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":973,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"51df520b3101976affce183deae28642","sha1":"270028c617de2a2357d00e26b3205e6125685a0a","sha256":"f29e9efe5a1e626fa2069f0806e91c1bc604c6bdf8d308f5e1099464f22f58a2","sha512":"e72d6bb9bbb7d11f41d9fe55ee55314014f678597bf8ff4cba4426a1874de00dd364c209ebdd8fb1ab97d375d7f17132c9d701c07d4e318cfab4d86fab548b57","ssdeep":"","tlshash":"811164f6f2009a6b42e003e258393a7d92e7215b6c1587560f5cc77885010f1985f8bb","first_seen":"2025-11-18T22:03:53.447102Z","last_seen":"2025-11-18T22:03:53.447102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":192,"connect":155,"send":0,"wait":155,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"search.yonderly.org/ami4get","fqdn":"search.yonderly.org","domain":"yonderly.org","tld":"org"},"ip":{"addr":"162.81.48.53","port":443,"asn":33566,"as":"KUB-FIBER-01","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"search.yonderly.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 04:15:41 GMT","end":"Tue, 30 Dec 2025 04:15:40 GMT"},"fingerprint":{"sha1":"A4:75:75:D7:74:A5:37:09:10:C1:E5:9A:A1:21:98:D9:40:B5:5B:34","sha256":"49:DE:E8:67:D4:F8:2B:71:71:82:81:EB:E9:8E:A3:A3:02:BD:EE:C9:CF:3D:BA:11:73:25:73:50:9F:A8:61:FE"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: search.yonderly.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nConnection: close\r\nContent-Type: application/json\r\nDate: Tue, 18 Nov 2025 22:02:53 GMT\r\nServer: OpenBSD httpd\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenBSD httpd","description":"","website":"https://man.openbsd.org/httpd.8","common_platform_enumeration":"cpe:2.3:a:openbsd:openbsd:*:*:*:*:*:*:*:*","icon":"OpenBSD httpd.svg","categories":["Web servers"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c0572d91a2fe9ed0df56f96281ab6711","sha1":"8701aa1cd0f6ff76caf32ed729d16612c8be7e7a","sha256":"ddb4cd006421c78cb33397ed501182ba66a6eb335e0a6dbda66ac139ba6ea7df","sha512":"51d060df87f2961cb8d6bf80ac64c5471e7b29312bac9dc65083b6d4fc285996c3ac8d04b98204c4b322550e916510ecc40eeafd86a7d84b8f6c7a5cdd366cd2","ssdeep":"","tlshash":"61115df7b1019aab42d003e2983a3a3d96eb240b2c5583924f5cc62895014f1a86f8fb","first_seen":"2025-11-18T22:03:53.448072Z","last_seen":"2025-11-18T22:03:53.448072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2434,"timings":{"blocked":-1,"dns":1994,"connect":107,"send":0,"wait":109,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.nigga.pt/ami4get","fqdn":"4get.nigga.pt","domain":"nigga.pt","tld":"pt"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.489Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.nigga.pt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":118,"connect":58,"send":0,"wait":0,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.lvkaszus.pl/ami4get","fqdn":"4get.lvkaszus.pl","domain":"lvkaszus.pl","tld":"pl"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.742Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.lvkaszus.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.nadeko.net/ami4get","fqdn":"4get.nadeko.net","domain":"nadeko.net","tld":"net"},"ip":{"addr":"200.14.81.226","port":443,"asn":270013,"as":"J AND J SPA INFOFRACTAL","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadeko.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 13:58:20 GMT","end":"Tue, 23 Dec 2025 13:58:19 GMT"},"fingerprint":{"sha1":"3C:79:C6:6E:74:6B:04:D8:6F:39:29:D1:AB:4B:DF:ED:FC:FF:03:67","sha256":"D7:3B:C9:77:AF:D8:AE:F8:7E:4A:DB:F7:7C:31:F1:79:F8:C8:46:CA:EE:A6:19:46:27:D2:FD:D1:78:F6:69:ED"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.nadeko.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 418 I'm a teapot\r\nserver: Angie\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Cookie, Accept, Accept-Encoding, Accept-Language, User-Agent\r\nvia: HTTP/1.1 git.gammaspectra.live/git/go-away@v0.0.0-20250904213329-95ac08540b8c+dirty\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nx-frame-options: sameorigin\r\npermissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=()\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"418","status_text":"I'm a teapot","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2674,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (560)","md5":"286cae4805f34438fc47dcfd023bf597","sha1":"78a6c61a3b95ccf60528f75048dcb0f488e2655c","sha256":"154b3d112464eec6020c93e69e5442becf0e76ffdcaa3135c1c9949175e008cb","sha512":"3e015c7610f197f6421da2ff64ed8c7eed82b3ebe78b672f159f351b3403ad808e5f668023983f86507339e41dfd9ea822c9c9a40af353f25deb8ce1ec02d548","ssdeep":"","tlshash":"e851629785dc682b43a102612ad4f2a4bf6220a767d4c475b39c53a9cf49f428b730e4","first_seen":"2025-11-18T22:03:53.448852Z","last_seen":"2025-11-18T22:03:53.448852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":6,"connect":209,"send":0,"wait":221,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.tux.pizza/ami4get","fqdn":"4get.tux.pizza","domain":"tux.pizza","tld":"pizza"},"ip":{"addr":"45.61.184.135","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.tux.pizza","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 07:45:03 GMT","end":"Sat, 27 Dec 2025 07:45:02 GMT"},"fingerprint":{"sha1":"DD:CF:54:38:B8:4E:76:7D:E2:7D:65:1B:1B:9B:3C:CC:D6:0A:B0:C4","sha256":"A8:12:F3:D5:AB:42:DA:6F:89:C3:AA:64:94:30:21:FC:0F:70:5F:9B:C1:3D:85:F5:F3:F4:5D:E3:4C:F1:76:39"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.tux.pizza\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\nserver: Caddy, Apache/2.4.62 (Unix)\r\nx-powered-by: PHP/8.4.3\r\ncontent-length: 946\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.62","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]},{"name":"PHP:8.4.3","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":946,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d359216d6537cc070417561aab78670d","sha1":"bad560b03caf60c5f98d2eff566804a7fe75b925","sha256":"318475e12a019df1b853807f3c50c059240ea3847b246b3da1ad9cb8d4c7ddc3","sha512":"afb7896e70f2936d3df1c44452372ee0268d05f5e0bce80001042e67c86938bc47e0fd18d65c384d2a4a49244f9729521835bfda43609d188c38013ca4adfd56","ssdeep":"","tlshash":"ee112df7f041daab42d003e248393a3d96eb201b6c15dba60f5dc67985000f0a86f8bb","first_seen":"2025-11-18T22:03:53.449782Z","last_seen":"2025-11-18T22:03:53.449782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":38,"connect":155,"send":0,"wait":157,"receive":3,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.ca/ami4get","fqdn":"4get.ca","domain":"4get.ca","tld":"ca"},"ip":{"addr":"158.69.216.142","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.4get.ca","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Tue, 11 Nov 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:8F:23:95:4E:E0:1D:85:44:C9:D1:F2:1C:0B:C8:52:4A:47:2C:47","sha256":"8B:C3:53:AC:59:69:91:4D:09:D8:B4:23:89:7A:E6:60:6D:46:22:65:D9:99:B3:C4:A7:EE:2F:21:5D:5A:FB:A8"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/instances\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-length: 450\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da3a2d1f63d5af12092b9a436538bfec","sha1":"dcedc57ab2a4c25b1cb4d50a21c50d4d79dc004b","sha256":"0305b71d062575ed53f0d212f4b1723ef5f6017ef219c495a373c6fcc7fc08a8","sha512":"275afeb20192984b57c8e36b4428d60b94a14c1ffd625fa0288e7345fae025fd23867fdf3c9759804b14c0d308b41aa440df9ed82931a61e239e97e818895ff2","ssdeep":"","tlshash":"9d1162f3b210c96a82e043e3493e3a3dcaea310b2c50a6420f5cd278c0004f1a86f1f7","first_seen":"2025-11-18T22:03:53.450729Z","last_seen":"2025-11-18T22:03:53.450729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-18","alert":"Sinkholed","trigger":"4get.ca","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4get.zzls.xyz/ami4get","fqdn":"4get.zzls.xyz","domain":"zzls.xyz","tld":"xyz"},"ip":{"addr":"38.45.72.78","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadeko.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 13:58:20 GMT","end":"Tue, 23 Dec 2025 13:58:19 GMT"},"fingerprint":{"sha1":"3C:79:C6:6E:74:6B:04:D8:6F:39:29:D1:AB:4B:DF:ED:FC:FF:03:67","sha256":"D7:3B:C9:77:AF:D8:AE:F8:7E:4A:DB:F7:7C:31:F1:79:F8:C8:46:CA:EE:A6:19:46:27:D2:FD:D1:78:F6:69:ED"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.zzls.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://4get.nadeko.net/ami4get\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":320,"dns":70,"connect":116,"send":0,"wait":116,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.neco.lol/ami4get","fqdn":"4get.neco.lol","domain":"neco.lol","tld":"lol"},"ip":{"addr":"154.38.167.42","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neco.lol","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Nov 2025 14:06:50 GMT","end":"Sun, 01 Feb 2026 14:06:49 GMT"},"fingerprint":{"sha1":"C9:20:90:7D:6B:66:DC:5E:C9:DF:6A:1E:FA:87:3E:36:D0:3C:05:B8","sha256":"13:EB:11:87:6C:F7:C9:89:DE:32:B6:C8:F0:1C:ED:86:F8:3D:A0:A1:0A:D8:4D:B8:B6:F9:41:2A:01:A5:5B:10"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.neco.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\ncontent-type: application/json\r\nx-powered-by: PHP/8.4.5\r\naccess-control-allow-origin: *\r\nonion-location: http://46tj5gkbuowmxhe2lgrfoxoutayieb43gy6s4sceovd3thd4ehmsmrid.onion/ami4get\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\npermissions-policy: autoplay=(self), fullscreen=(self), microphone=(), camera=(), geolocation=(), battery=()\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1559,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"76ea63be50abe93d526bd0e8b7dd8e1c","sha1":"f6521e412da299df5cb357285a314af5d54034b8","sha256":"1bb9e67d30c346aa28c3b371987016a25948e44983b179fae72e48140b4ab8da","sha512":"3a8f7070c5440f3c417ec414e0ea3332614feb17116c5933bc2bb07b1f8e8a1e88a54031522077bfb5c7df4c6be24af4228d918aa40dd8ba11b3cd6a2ab736b3","ssdeep":"","tlshash":"30311cf7f115caab86e043e6983e3b3dd6eb201b6c11a7924b4cd63491000f5a86f5b7","first_seen":"2025-11-18T22:03:53.451719Z","last_seen":"2025-11-18T22:03:53.451719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":67,"connect":125,"send":0,"wait":129,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"search.fzorb.xyz/ami4get","fqdn":"search.fzorb.xyz","domain":"fzorb.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.485Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: search.fzorb.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"search.milivojevic.in.rs/ami4get","fqdn":"search.milivojevic.in.rs","domain":"milivojevic.in.rs","tld":"in.rs"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.750Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: search.milivojevic.in.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.turtlecute.org/ami4get","fqdn":"4get.turtlecute.org","domain":"turtlecute.org","tld":"org"},"ip":{"addr":"168.231.108.37","port":443,"asn":0,"as":"","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.turtlecute.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 21:58:53 GMT","end":"Tue, 13 Jan 2026 21:58:52 GMT"},"fingerprint":{"sha1":"EB:DC:C5:E5:95:0C:2A:31:B3:59:24:F3:47:97:E7:B7:0B:5E:B4:BE","sha256":"36:A6:D2:DF:53:70:14:A1:63:1C:67:B2:7F:50:0D:91:84:60:C9:5F:34:47:80:83:8D:97:5A:DF:2F:6B:FF:44"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.turtlecute.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; img-src 'self' data: https: http:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https: http:; font-src 'self' data: https:; frame-ancestors 'none';\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:52 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"36ab75705d51307bbe697415c7dafce2","sha1":"b7502ccda99edb664510874d8274f4f460fe633f","sha256":"6ebf942fc29477ee5c9bfd86880f35b5ed2aa54f600cbe7408e0669d4ebd1324","sha512":"e1fe8ee2db70d4e10dbfb3801fc91feb0eb12fe1374d40c8599fee04df823a656a18e9eee671f56297272e8a47e2dba1842618c948b31da48d8babb97a844dda","ssdeep":"","tlshash":"291177f6f1448a6a42d003e6443d3a7de6eb31176c15d7528f5cc67891000f1995f4f7","first_seen":"2025-11-18T22:03:53.452626Z","last_seen":"2025-11-18T22:03:53.452626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":78,"connect":19,"send":0,"wait":26,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.f24o.zip/ami4get","fqdn":"4get.f24o.zip","domain":"f24o.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.249Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.f24o.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":12,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"search.mint.lgbt/ami4get","fqdn":"search.mint.lgbt","domain":"mint.lgbt","tld":"lgbt"},"ip":{"addr":"186.105.29.250","port":443,"asn":7418,"as":"TELEFONICA CHILE S.A.","country":"Chile","country_code":"CL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"search.mint.lgbt","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Sep 2025 12:34:20 GMT","end":"Wed, 10 Dec 2025 12:34:19 GMT"},"fingerprint":{"sha1":"B7:24:BF:18:21:40:44:10:85:71:CF:93:04:C7:8C:99:CC:F4:BA:D9","sha256":"3A:FD:32:3F:44:D1:60:CF:33:0C:BB:05:18:D7:18:8B:B4:2E:30:FE:65:12:DE:4A:59:F7:E7:20:F9:B8:90:9A"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: search.mint.lgbt\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 18 Nov 2025 22:02:52 GMT\r\nContent-Type: application/json\r\nContent-Length: 951\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.3.14\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":951,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e66e0443504a7711bd155f3c9871f693","sha1":"742a9295370a93aaed96ce18410498e84f58714e","sha256":"ab00db20ae2e0221aab119cfed23cdf4092c610227204f29c05f5083529342ab","sha512":"ff0b2ecd11483b8d4872eac2d26e85029822ac79a13d2e9c62ceb11c0b8b3315c145df382a094faa7772fa95da5cb6928c5c967ea6f94163b4eb9014b2a43936","ssdeep":"","tlshash":"5d112df7f041daab42e003e248393a7d96eb30172c55c7564f5dcb6985004f4a86f8bb","first_seen":"2025-11-18T22:03:53.453425Z","last_seen":"2025-11-18T22:03:53.453425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":-1,"dns":355,"connect":231,"send":0,"wait":231,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.dorfdsl.de/ami4get","fqdn":"4get.dorfdsl.de","domain":"dorfdsl.de","tld":"de"},"ip":{"addr":"82.139.252.17","port":443,"asn":8820,"as":"tal.de GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorfdsl.de","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 09:38:13 GMT","end":"Fri, 30 Jan 2026 09:38:12 GMT"},"fingerprint":{"sha1":"8E:80:F9:02:FB:F5:99:45:80:14:B2:72:F4:DA:69:74:DA:94:CC:93","sha256":"E2:DC:C7:E1:C7:5A:B4:3F:BE:42:B5:4A:6C:CF:18:63:96:EF:29:B4:11:9F:FD:03:E5:6B:13:99:79:06:33:9D"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.dorfdsl.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 18 Nov 2025 22:02:51 GMT\r\nServer: Apache/2.4.65 (Debian)\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 391\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":938,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f9e9059bb3afd0b454a558ee5d5ddad1","sha1":"601b5e17a7bb4cb1c9d7e0453817ecae84f3be94","sha256":"d57e4d83487bb346c24a6a50941cc28ea4542e1e93bac7e3a2d48894db65ec88","sha512":"4cfa6ab5f8266bea051ff895f9ee1af52a9f0edd785fd5f8472041e804ac48321f443e0b93df8192c267915933810812a144cbe07d5cd2877ab39afc4a31691e","ssdeep":"","tlshash":"fa113ff7f041da6b42d003e248393a7d92e720172c15c7960f5cc66995000f49c6f8b7","first_seen":"2025-11-18T22:03:53.454346Z","last_seen":"2025-11-18T22:03:53.454346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":211,"connect":34,"send":0,"wait":36,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.lol/ami4get","fqdn":"4get.lol","domain":"4get.lol","tld":"lol"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.754Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":204,"connect":126,"send":0,"wait":0,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.twipler.space/ami4get","fqdn":"4get.twipler.space","domain":"twipler.space","tld":"space"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:52.064Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.twipler.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.thebunny.zone/ami4get","fqdn":"4get.thebunny.zone","domain":"thebunny.zone","tld":"zone"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.482Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.thebunny.zone\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":236,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.getcobalt.org/ami4get","fqdn":"4get.getcobalt.org","domain":"getcobalt.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.484Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.getcobalt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":342,"connect":353,"send":0,"wait":0,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.canine.tools/ami4get","fqdn":"4get.canine.tools","domain":"canine.tools","tld":"tools"},"ip":{"addr":"15.204.212.115","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4get.canine.tools","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 20:18:28 GMT","end":"Wed, 11 Feb 2026 20:18:27 GMT"},"fingerprint":{"sha1":"C8:79:CC:1C:1E:26:2D:59:39:E1:57:E9:1A:93:4C:41:73:44:6C:2F","sha256":"44:56:73:50:50:6E:91:22:3C:3C:3A:61:9C:36:8E:D6:56:EF:27:BC:26:0B:B9:83:6E:01:00:CE:0C:44:38:15"}}},"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.canine.tools\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Tue, 18 Nov 2025 22:02:51 GMT\r\nfeature-policy: accelerometer 'none'; ambient-light-sensor 'none'; autoplay 'none'; camera 'none'; encrypted-media 'none'; focus-without-user-activation 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'none'; sync-xhr 'none'; usb 'none'; vr 'none';\r\npermissions-policy: accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()\r\nreferrer-policy: no-referrer\r\nserver: Apache/2.4.65 (Unix)\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-powered-by: PHP/8.4.14\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 386\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.65","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"UNIX","description":"Unix is a family of multitasking, multiuser computer operating systems.","website":"https://unix.org","common_platform_enumeration":"","icon":"UNIX.png","categories":["Operating systems"]}],"data":{"size":934,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"adf23a2c3954f7992de216ba3d44cd0f","sha1":"57be6f68f4cd4cf1f45652df238a93033ebe787f","sha256":"f3853bd7fcd22dfdb693e34d533592f79fcc5c140cd2e5277fda7a7262b9a35e","sha512":"bfbc9538045fdcb1549dea3e8326b140d32d7bd3eb681c593c685394975eb8739e1d33c86fbed1a287b621e824cbd206a4c3d60b353b10c16fe48198741dbb29","ssdeep":"","tlshash":"061140f7f5009aab42d003e258393a3d92e7244b6c2587560f5cc67985014f1986f8fb","first_seen":"2025-11-18T22:03:53.455149Z","last_seen":"2025-11-18T22:03:53.455149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":169,"connect":91,"send":0,"wait":124,"receive":1,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4get.etenie.pl/ami4get","fqdn":"4get.etenie.pl","domain":"etenie.pl","tld":"pl"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://4get.ca/instances","date":"2025-11-18T22:02:51.746Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ami4get HTTP/1.1\r\nHost: 4get.etenie.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://4get.ca/\r\nOrigin: https://4get.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}