{"report_id":"fb0c4f18-c803-4fbf-bcd2-20d81d566ad3","version":0,"status":"done","tags":[],"date":"2026-08-26T09:52:36Z","url":{"schema":"http","addr":"layooo-sol.xyz/","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"layooo-sol.xyz/","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"title":"$LAYOOO Airdrop","dom":{"size":14010,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a2e9ff7083f5383b35622343f1e34fb3","sha1":"00bf4f200f48cd3e0548d5662edc34ad7dc25579","sha256":"05a0165962ce8f2e8ef5486d7ea4fdf18979d63c12d033ee7adf7bab16c96e85","sha512":"39443ff8bbe0f75724eeae004e9985bd6ba3fa07e6a1e848ae0740f58087e92af512c8898a7aa17d57cf2a1c7555eba2a59e00727f58bf83cd0e472ac7c76a0d","ssdeep":"192:YNlr4spFgYglR52acBiiJctNcvHicH74ZFfKlh4jyqrSeu9wTVtrdiHcNg4fJH5Q:ilr4WFW9Vn5f5trdiufE","tlshash":"ad52966669e310626843b5795bef12187274e003ca0edd157eddb2c08fc2be499e7bd8","dom_hash":"domhash5dab3feecf1b9a2fe9081926ce388e21","first_seen":"2026-08-26T09:52:37.551655Z","last_seen":"2026-08-26T09:52:37.551655Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"layooo-sol.xyz/","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T09:52:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-08-20T12:56:23.060492Z","alert_count":0,"request_count":1,"received_data":9427,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"layooo-sol.xyz","ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-26T09:47:29.124995Z","last_seen":"2026-08-26T09:47:29.124995Z","alert_count":10,"request_count":5,"received_data":721345,"sent_data":2536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"layooo-sol.xyz/","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03f5308b060453363a4ff3afb8085f67","sha1":"8038d7116187a195b3262f3f1e1034defd9828a3","sha256":"71deb796cadc0ec1a2db568668b31f602ca613e89398dc114321e55af76697b6","sha512":"704213f983827b58dca7bb502016d79abaddd2de5d4bc1f3cb7fe59dd268cffbca9868b55b2dd9e9c2b7304e26786414fbaa151b9e4c2872de2259653424a362","ssdeep":"","tlshash":"9fc0220090a08960090c20f7627822a42040191c1022a1cacafe489a489ce800a08410","size":180,"data":"","first_seen":"2026-07-20T12:58:56.623469Z","last_seen":"2026-08-26T11:17:23.095884Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"layooo-sol.xyz/","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c8d81f1eed6ad5292f95f2d5a2312e2","sha1":"6e4cd798d2e6dacbd1f6c107b6a27dd8779dc37f","sha256":"8312fe13593fd6989049b7c7c36ea06ff3c41e445f17c89735458323265c0eef","sha512":"aa19e7f785379d7076e46dcf6dd9f958621d9c9543e72902648c89a76f12054fd27543b7e93b10ea04daf03aafbc0fb01507aff95405d239c41f939fa00b346a","ssdeep":"48:leyhlRtiQPj5V/ioSIGONNbZekazdFfJDsYslov2a4EY46Y46kAmK74+ZT:EGbGONNFenzdFfJmq2a5YtpfK74+h","tlshash":"3ba1407abceb242118d7787ac7af621074968153578dd902bc4da6c00fe0f5485feae8","size":4925,"data":"","first_seen":"2026-08-26T09:47:32.948257Z","last_seen":"2026-08-26T09:52:37.562819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"layooo-sol.xyz/secureproxy?s=%2Fipfs%2FvpMqybSJBG35Mc95v5OmAw04823f96109fa22f9bc69124b3b2c242%3Ft%3D1787737926978","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de11ae3dc5b92a344de625d8392267b0","sha1":"217302b6cb3e8c65598359130185ea4f49fff522","sha256":"677d67ad4f8700da1c341024a4c3561122fce44a628d8414c8486263f9c4f8df","sha512":"c3ea81b4fcb85335724394a84ab95e8783d9af49d6b50fdb40d78c9769b800e9a8226d913124269698d09ae19e9e50fea61af77d9aafaedac3352876b71c0c39","ssdeep":"6144:ch5gDUrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csoq9NWCEiox3Ti/ESVPHSyyA","tlshash":"96d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","size":645596,"data":"","first_seen":"2026-08-26T09:52:37.560898Z","last_seen":"2026-08-26T09:52:37.560898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"layooo-sol.xyz/image.jpg","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://layooo-sol.xyz/","date":"2026-08-26T09:52:06.997Z","timestamp":1787737926997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layooo-sol.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 19:50:08 GMT","end":"Sat, 14 Nov 2026 20:47:47 GMT"},"fingerprint":{"sha1":"C9:CF:9D:06:47:17:CE:4E:3A:CF:84:EA:1A:A4:84:8D:8E:18:78:9A","sha256":"E8:BA:03:EC:AE:F4:01:C3:34:FB:EF:EC:2A:09:18:46:77:E8:C5:4E:61:5A:AE:40:0A:20:A7:72:E0:37:CA:A7"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: layooo-sol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://layooo-sol.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 09:52:07 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sun, 16 Aug 2026 23:19:24 GMT\r\netag: \"6a82457c-6cc6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 309\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVHzm49nHfPD7iTNAVEXj6SeZ%2FZhHPE%2BfteNpLTsfy8nOysOiuafGj170H0DCGjik5i4L6zqVnTgh7R3PPoCOvWz%2BluwEzoSlJ9hybExfsMFYDn9xAB34A7DSbluqmADJg%3D%3D\"}]}\r\ncf-ray: a311f11bb83c56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27846\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27846,"size_decoded":28785,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 501x499, components 3","md5":"d59957bf4673e9504ea22b5b9959dcae","sha1":"6c289e7fb7ac8cdab193df7298a03b4415fb0ddd","sha256":"e6f5c4f7b6347f3c46c95dbad365de5a7288fa847dbe986f9b669ddb7b020f66","sha512":"6b7fb86c13c93261ed13765579466cc4f7493b7aace48b9fcbeeee6eb304eb15d13f02b6b2b9d760fb197934552a61ced208af9c03f7c0d3c502633a6dd4a7c1","ssdeep":"768:qmh3rsOCT8PevufkNKW0pklrzLgegYIgZVQ:qmhbsOc8W28NKW0pk98egT+VQ","tlshash":"ccc2e1d9ece86ad1fc8f8afd84c12224e6991509d0154cd0f78bcef59f4d5de7889280","first_seen":"2026-08-26T09:47:32.929671Z","last_seen":"2026-08-26T09:52:37.553993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/9sfCHMLWSVy6MD6zr7pR1gD3qbT7C6K1E3dMf2ZBpump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://layooo-sol.xyz/","date":"2026-08-26T09:52:07.282Z","timestamp":1787737927282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:21:04 GMT","end":"Tue, 20 Oct 2026 09:20:41 GMT"},"fingerprint":{"sha1":"8A:72:F9:DD:CB:C2:89:0C:90:E0:90:07:E3:E0:F0:43:79:73:64:E6","sha256":"20:C2:05:CD:92:98:DD:03:AF:68:B2:FC:46:93:04:2C:04:86:C1:66:8C:A0:D9:E3:15:9F:A1:52:CC:4B:88:B6"}}},"request":{"raw":"GET /latest/dex/tokens/9sfCHMLWSVy6MD6zr7pR1gD3qbT7C6K1E3dMf2ZBpump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://layooo-sol.xyz/\r\nOrigin: https://layooo-sol.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 26 Aug 2026 09:52:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: __cf_bm=XeD5OMX09oGwwtEBVxvY42g_OqmOT5ot2jfFgi1kssg-1787737927.30865-1.0.1.1-NUBv3hUMd_QDUXhPF.OlmYd1Z6.J1HxKDqFsEnyRzZ4W35lPByxbbI4S4FuoXiwaRlejG3juBKU..2AuDMSeYfn__eF5YlXylPo17Ec32pb8cEaDD1EDVXuim9DuTbuXTvqNgEpSR6pr7ExTSpldmw; HttpOnly; SameSite=None; Secure; Path=/; Domain=dexscreener.com; Expires=Wed, 26 Aug 2026 10:22:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"2192-CFJyKGLO+DUqef+Pja0KvA7W8Xs\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\nexpires: Wed, 26 Aug 2026 09:52:37 GMT\r\ncache-control: public, max-age=30\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\ncf-ray: a311f11daf6549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"XeD5OMX09oGwwtEBVxvY42g_OqmOT5ot2jfFgi1kssg-1787737927.30865-1.0.1.1-NUBv3hUMd_QDUXhPF.OlmYd1Z6.J1HxKDqFsEnyRzZ4W35lPByxbbI4S4FuoXiwaRlejG3juBKU..2AuDMSeYfn__eF5YlXylPo17Ec32pb8cEaDD1EDVXuim9DuTbuXTvqNgEpSR6pr7ExTSpldmw","quoted":false,"path":"/","domain":"dexscreener.com","expires":"2026-08-26T10:22:07Z","raw_expires":"Wed, 26 Aug 2026 10:22:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=XeD5OMX09oGwwtEBVxvY42g_OqmOT5ot2jfFgi1kssg-1787737927.30865-1.0.1.1-NUBv3hUMd_QDUXhPF.OlmYd1Z6.J1HxKDqFsEnyRzZ4W35lPByxbbI4S4FuoXiwaRlejG3juBKU..2AuDMSeYfn__eF5YlXylPo17Ec32pb8cEaDD1EDVXuim9DuTbuXTvqNgEpSR6pr7ExTSpldmw; HttpOnly; SameSite=None; Secure; Path=/; Domain=dexscreener.com; Expires=Wed, 26 Aug 2026 10:22:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8594,"size_decoded":2916,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30037d73c6bc24406c57068398bd8ad0","sha1":"0852722862cef8352a79ff8f8dad0abc0ed6f17b","sha256":"9a82694bea146b300cedf535bb5ad97657f4806745bc400470c11736d1d998c1","sha512":"18e1b3e2f962f89fdbdd803a2286b74555b4463ef9e4d393e1ff87b184c36c45901c76292a090e559f596b2936a48cb6d6fbf324d5caaf40990a06ad4c87e858","ssdeep":"192:srQOUqLmZJSOUqLmqvOUqLmPYZOUqLm6UUVLmQJ:srQOUqLuSOUqLrvOUqLu8OUqLDUUVLp","tlshash":"9b0263f783dd291bd7002bf2299a383d80e272474fed599bc184dd9942c8b8f591ba58","first_seen":"2026-08-26T09:52:37.555933Z","last_seen":"2026-08-26T09:52:37.555933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":11,"connect":15,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"layooo-sol.xyz/image.jpg","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://layooo-sol.xyz/","date":"2026-08-26T09:52:07.487Z","timestamp":1787737927487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layooo-sol.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 19:50:08 GMT","end":"Sat, 14 Nov 2026 20:47:47 GMT"},"fingerprint":{"sha1":"C9:CF:9D:06:47:17:CE:4E:3A:CF:84:EA:1A:A4:84:8D:8E:18:78:9A","sha256":"E8:BA:03:EC:AE:F4:01:C3:34:FB:EF:EC:2A:09:18:46:77:E8:C5:4E:61:5A:AE:40:0A:20:A7:72:E0:37:CA:A7"}}},"request":{"raw":"GET /image.jpg HTTP/1.1\r\nHost: layooo-sol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://layooo-sol.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 09:52:07 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sun, 16 Aug 2026 23:19:24 GMT\r\netag: \"6a82457c-6cc6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 309\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OacBlZ%2Bh0xc7AhXZLrSf2WvuDq%2BGO%2Ftc%2BnJdIbjZvY5CoAmg%2Bf04tBxScL5xhLEqG63l2YGTSTIUKR2oLXVOgUtyepwREL8JF1ADsSH%2B68tm3Y0BVbtfmGKR4oaRPTzGVA%3D%3D\"}]}\r\ncf-ray: a311f11ec87456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27846\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27846,"size_decoded":28792,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 501x499, components 3","md5":"d59957bf4673e9504ea22b5b9959dcae","sha1":"6c289e7fb7ac8cdab193df7298a03b4415fb0ddd","sha256":"e6f5c4f7b6347f3c46c95dbad365de5a7288fa847dbe986f9b669ddb7b020f66","sha512":"6b7fb86c13c93261ed13765579466cc4f7493b7aace48b9fcbeeee6eb304eb15d13f02b6b2b9d760fb197934552a61ced208af9c03f7c0d3c502633a6dd4a7c1","ssdeep":"768:qmh3rsOCT8PevufkNKW0pklrzLgegYIgZVQ:qmhbsOc8W28NKW0pk98egT+VQ","tlshash":"ccc2e1d9ece86ad1fc8f8afd84c12224e6991509d0154cd0f78bcef59f4d5de7889280","first_seen":"2026-08-26T09:47:32.929671Z","last_seen":"2026-08-26T09:52:37.553993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"layooo-sol.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://layooo-sol.xyz/","date":"2026-08-26T09:52:08.243Z","timestamp":1787737928243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layooo-sol.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 19:50:08 GMT","end":"Sat, 14 Nov 2026 20:47:47 GMT"},"fingerprint":{"sha1":"C9:CF:9D:06:47:17:CE:4E:3A:CF:84:EA:1A:A4:84:8D:8E:18:78:9A","sha256":"E8:BA:03:EC:AE:F4:01:C3:34:FB:EF:EC:2A:09:18:46:77:E8:C5:4E:61:5A:AE:40:0A:20:A7:72:E0:37:CA:A7"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: layooo-sol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://layooo-sol.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1278\r\nOrigin: https://layooo-sol.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1278,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBGwMwAxcACgD-AtECFQDnAh0AAQIAOgMAAO8nhn2XtsKCAWczyun10Q1KJItpAYgCAAA6o1bQXsHOAMVaUOBetfArQMABq9daleZv1tj_mRnTSdCO7czifMdPEPefnWA4alnoO2XiJG0MDyg88si53ubGFXIx2D7k14xpo_q012n_WCMh1mC_G3EgUrEnUG0pRBXXLCOiRtdPRasEBtlHPTvxkG4mCH12aG3NVfYjyH8MjpfUF_9QFJEeD7_7qmxeUK5DPcu8K2XY6uBzZ7ua5gqtYkq53GedbcDwHOMpg2KWfbixP57Z58oliL7VOAxjDifvRdve4s3YSuDhMFYCleevYbYuYTn_NQku2z36L9CkLOK8ZmPFhmKWM8B4HI8I1PT2EKBZXpMgGReVXMRFkv8Nq3nIT_v4Z5gL8byNGeS-5ZUDSYitIcOjOvfitlbke8tT2s5A_yrNErvD2RFLyV8Uu0lIpUrlnJBZcLT6F2UShCFbnTqM0pxTIc5_P6_YSjCXnUUXnv7tlo0NHRp4bTb8Pbb9-gyWB450OSf4JhRJhUf7LcOXqCnHzhXseIeAtC2pX2ZL_u_lMw_FCCjSjFMDRVQNcjSywqLazk5Q4MOJ9c2cStD2iCk87M3uuaRCKHmJkNy57sG29FQaD1_qys47wbjW1DKlnI17Om_8N6CnL8MxqbJhQppT2gb5s-Ug0jQMvwXMHcKbHD8Q8a8ZPdBWdi0koBgyUCrRCqRtBB2K1Tt-YY7QaZOcwW1rK5Ggaj87dc1UkMwk-bE6Szz0xA_J35ZKpWptXwMCDT9Jsk5TQZr3XhhVuLL0-ch3lwUaDmx11dHpnttRlOCb5-ZY6p3Z-RJ1zJKsjGocbL4l6OlYPh8DZhn-NuKn4Ms3tGP84wCyYicbcgrAkxoEu5LpXwtWc9IAM0RLUxRrPolaLDmHaVsoR2VBX6GEP8YzkvZlc5cFKKMx_3f3R9Ke4a_HNvZ0jPX7Dvgz8vIPjABnEC-zcfo3oTAnZvTmQMgj9uoUFbXiVeaPIuLG8R4gA9HNE85K5ozPkxGaa-PoBXtRXpCqIZ4YXSVepef7QOg5GgdXDuvuNzaNFfHrz6EvzK1Qw1MZ3u5TrWXbPPChjoGAK5i8AZ2-dXdpITcsCPRdiZXrkZSO2G6m9r-nyn0HUVLBqc8mr4dc1Tj0gUf9XAezEX6kP84Q\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 09:52:09 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1787737988448\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 08/26/2026 09:52:09\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: e7802bced5806ba6341f7fd4dc7bbf0a\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FBYchw%2Bg3GmY4woRYKZwpEYa9xbb01B915phQthD12SSg%2Bj5G7%2FDLQdeJZKostor0ShPTegQ8xqyBWAlVf1v9%2F1cJu%2B5Iv8DGm8JOt7yPXH%2F6HcniZPsB4Da90k%2BodTsg%3D%3D\"}]}\r\ncf-ray: a311f12388f456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3247,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-26T13:40:42.881751Z","times_seen":18114035,"resource_available":true,"data":null}},"time_used":858,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":858,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"layooo-sol.xyz/","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T09:52:06.700Z","timestamp":1787737926700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layooo-sol.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 19:50:08 GMT","end":"Sat, 14 Nov 2026 20:47:47 GMT"},"fingerprint":{"sha1":"C9:CF:9D:06:47:17:CE:4E:3A:CF:84:EA:1A:A4:84:8D:8E:18:78:9A","sha256":"E8:BA:03:EC:AE:F4:01:C3:34:FB:EF:EC:2A:09:18:46:77:E8:C5:4E:61:5A:AE:40:0A:20:A7:72:E0:37:CA:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: layooo-sol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 26 Aug 2026 09:52:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 16 Aug 2026 23:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yBNAWQKgBGLq56Se75zNYaGbtbKj1TgX%2Fh9AqnxOg24jl%2B8oePY3J%2BtTB6usEhR3XdnOjw6DAJjM5L7sIAYXCqt6G4VNDWnJvQThNdjGFEQ18hpdtbr69tIvW15mZnLIg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 309\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a311f11a2e1c5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14286,"size_decoded":5292,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"45429cf320e0ec533d5f953d147c5771","sha1":"9eb3c606ab2dfdf9e6213729231063f051a34f37","sha256":"09f9a8acc3fe53aba4a8472ac406214d9be5b77f556584f459c43dcae13a5982","sha512":"eca09ab60184f9b66108c1c68cd4e229d53f44441ec72de1ae8e37957202f4563ac38b24434858be8c6fdf9c941a2bc51d110525f33a68fed43390280ffcfa08","ssdeep":"192:WNgnJw8P2RU1jt0VoccJJoY0ix9uViWiGirgGq3CBTR5i7:k1Ube2WiTq/","tlshash":"fc525126694214125873b375efe7521cfba65063c706c2167eddb2810ff2b9085a7fd8","first_seen":"2026-08-26T09:47:32.943489Z","last_seen":"2026-08-26T09:52:37.559865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":50,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"layooo-sol.xyz/secureproxy?s=%2Fipfs%2FvpMqybSJBG35Mc95v5OmAw04823f96109fa22f9bc69124b3b2c242%3Ft%3D1787737926978","fqdn":"layooo-sol.xyz","domain":"layooo-sol.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://layooo-sol.xyz/","date":"2026-08-26T09:52:06.994Z","timestamp":1787737926994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layooo-sol.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 19:50:08 GMT","end":"Sat, 14 Nov 2026 20:47:47 GMT"},"fingerprint":{"sha1":"C9:CF:9D:06:47:17:CE:4E:3A:CF:84:EA:1A:A4:84:8D:8E:18:78:9A","sha256":"E8:BA:03:EC:AE:F4:01:C3:34:FB:EF:EC:2A:09:18:46:77:E8:C5:4E:61:5A:AE:40:0A:20:A7:72:E0:37:CA:A7"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FvpMqybSJBG35Mc95v5OmAw04823f96109fa22f9bc69124b3b2c242%3Ft%3D1787737926978 HTTP/1.1\r\nHost: layooo-sol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://layooo-sol.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 26 Aug 2026 09:52:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9d9dc-IXMCtss+jGVZg1kTAYXqT0n/9SI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=H2dqWgvwfPQRKkP6f0njaQ.js\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/26/2026 09:52:07\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 40a3b43b4b6a12a53cb2c1cedd57935e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aINA6YXIg4re8%2BgMU7h%2Bnj%2F0dNquPSfdiAfsQcsIACVTJYGPZbMmYWWJvTfmh2w2FX9EYP%2FrO1jvF%2B9NUxOIsgYllvjG8Mnd%2FwhMmqNuyiLePXvwj7ot3rVncNNEDiwqHg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a311f11bb83b56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645596,"size_decoded":142127,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"de11ae3dc5b92a344de625d8392267b0","sha1":"217302b6cb3e8c65598359130185ea4f49fff522","sha256":"677d67ad4f8700da1c341024a4c3561122fce44a628d8414c8486263f9c4f8df","sha512":"c3ea81b4fcb85335724394a84ab95e8783d9af49d6b50fdb40d78c9769b800e9a8226d913124269698d09ae19e9e50fea61af77d9aafaedac3352876b71c0c39","ssdeep":"6144:ch5gDUrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csoq9NWCEiox3Ti/ESVPHSyyA","tlshash":"96d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","first_seen":"2026-08-26T09:52:37.560898Z","last_seen":"2026-08-26T09:52:37.560898Z","times_seen":1,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"layooo-sol.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}