{"report_id":"fd807fd4-ce6d-47ad-9f0b-096a94a4b5ef","version":6,"status":"done","tags":["dyndns"],"date":"2026-05-31T13:03:25Z","url":{"schema":"http","addr":"my-spotifymembership.dynv6.net/signin","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"ip":{"addr":"62.4.29.80","port":0,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"my-spotifymembership.dynv6.net/signin","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"title":"Spotify","dom":{"size":10800,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (802)","md5":"14b39b772f6f8c6deb79d9e20dca0974","sha1":"b3871ed136312f531a13333832032599a0454234","sha256":"1595129f3344e5abe4e4eef33c1a52b39a11c9057fa7f4c716ffde43515c0f44","sha512":"2ffc18a97596e09e18536f2d3bacc86b6a002ac2ff77764f7c7a51f449c7212eba09211cb0d8d33e752bd0ea8ae7780a212ab45ab28980c187500691fae843e5","ssdeep":"192:L/hjIa4Qa4F3dgUZ+qSef/bTZyaoA+6fYRC:L/bgd4fYRC","tlshash":"152294f1e1f340e791a3c7ec37b6aa467a659023d90bcb58779d2b984fc0d4a5887348","dom_hash":"domhashb48e901e27346bfff67bf08f2904fd9f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"my-spotifymembership.dynv6.net/signin","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"ip":{"addr":"62.4.29.80","port":0,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-05T13:03:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"summary":[{"fqdn":"my-spotifymembership.dynv6.net","ip":{"addr":"62.4.29.80","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2014-10-24","domain_rank":0,"first_seen":"2026-05-31T13:03:25.789899Z","last_seen":"2026-05-31T13:03:25.7899Z","alert_count":9,"request_count":3,"received_data":33729,"sent_data":1569,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":2,"received_data":314177,"sent_data":1041,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"my-spotifymembership.dynv6.net/signin","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"ip":{"addr":"62.4.29.80","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cd3ba7c685b579014b5bcc58b627bd9","sha1":"96d0d43a92ec2c38f018781fb85eb1c4b11573f4","sha256":"cab5781e8bd7bf1b1289a7bf6529e9a210d50ea62b777be0a94cbfba76de72bf","sha512":"c55c2bcb9f759e9d6e7221c47697c7258ecaeb1b88ab486b4343dd4cf60f2bb550155ea5f210b2efeef4d735ef11e617acba2577780fac5e9c715e297aca692c","ssdeep":"","tlshash":"29016229a1b185b213aba19e5bbbee2019320497f007e6043e0d4e0d2fd446c675bb56","size":687,"data":"","first_seen":"2026-05-31T13:03:28.456163Z","last_seen":"2026-05-31T13:55:10.718265Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc1b73e70520fa84b1846afe0ec8fb6","sha1":"69f688858b7149c561c4a1fbc496e9e66b3df2fe","sha256":"e4fd49181388c48ec5040bd3fe66f57c29c8e67fcd8502b3354b96ec7ab47cc7","sha512":"1ef3a326b7703690db9062481b664da83955a8ca3beea6ece0c7b871a8741e80eb7e1adb03ef12065667d4aaef010c3b7082cb3c526f770220a61cd098c9be3f","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08g:yNwhh+CywwWsXZg","tlshash":"7673d6593245b4730ade85a68037430bf2265898b64b812cb57cadde2a7dcc27277f78","size":80496,"data":"","first_seen":"2025-09-04T15:51:36.009011Z","last_seen":"2026-05-31T13:55:10.71765Z","times_seen":2657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"my-spotifymembership.dynv6.net/signin","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"ip":{"addr":"62.4.29.80","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-31T13:03:04.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my-spotifymembership.dynv6.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:56:27 GMT","end":"Fri, 28 Aug 2026 12:56:26 GMT"},"fingerprint":{"sha1":"6C:95:2F:4D:56:2E:52:B6:3E:D3:56:6D:4F:93:F1:5D:36:96:80:A4","sha256":"DD:64:FF:FF:FE:74:FB:BA:CE:CE:41:B7:1E:79:82:3C:43:E2:37:A2:32:8F:1C:67:EC:E8:F7:7D:9C:DF:80:08"}}},"request":{"raw":"GET /signin HTTP/1.1\r\nHost: my-spotifymembership.dynv6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=meqjcu2bbvkb3inbcq33ulqrg0; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2957\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 31 May 2026 13:03:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.8","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":12075,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (771)","md5":"45431aeed9f6372cedb2ca7137543241","sha1":"008aed963bd1657abc9f1708a97e778b3ff0c95d","sha256":"e07f6fc9e86fe1ddb6ed17e18ffec5c2c0793c776740d397dfe970e49d7d2ba9","sha512":"936d8c2d36c9924669bfc72118838e77b56bd1ead42af6bec66fdfcaaa21b479599e1a3486f153e032f44b1740077af999ac77282ccdf5c70ffaeaad52381992","ssdeep":"192:FaAhjIa4Qa4F3dgUZ+qKGHZyaoA+eh3OHq:gykdwheHq","tlshash":"ee4282f1e5f340e6a1a387ac3bb6ea067a659023d90acb4877dc2b944f85d4a54c734c","first_seen":"2026-05-31T13:03:28.445667Z","last_seen":"2026-05-31T13:55:10.711014Z","times_seen":4,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":69,"dns":7,"connect":27,"send":0,"wait":29,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://my-spotifymembership.dynv6.net/signin","date":"2026-05-31T13:03:04.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.8/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://my-spotifymembership.dynv6.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://my-spotifymembership.dynv6.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.8\r\nx-jsd-version-type: version\r\netag: W/\"38aaf-dXWYf3DuXJH2oOdxs4xlB+RXq2E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 13:03:04 GMT\r\nage: 1998353\r\nx-served-by: cache-fra-eddf8230212-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232111,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"1b1cb0e2be9a21f091a87691f20c6300","sha1":"7575987f70ee5c91f6a0e771b38c6507e457ab61","sha256":"d85327d99c7a3ee1f9b5d0500d1370acea3ad2db39c163c2f51f232baedbdede","sha512":"d9b0500a3727c3ae7c2e1a389e55c971ce96915fd4c6913fb00a246d73f140d1aa98d750ad6aadc36e8db3d90517fc86efdda9291d52c7cfd8d4b7f55cde0628","ssdeep":"1536:i9NnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41r:EnXp9GfVV98II6V6pz600I41r","tlshash":"123482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-09-04T15:51:36.002152Z","last_seen":"2026-05-31T15:07:54.340195Z","times_seen":3035,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":68,"dns":32,"connect":13,"send":0,"wait":14,"receive":6,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my-spotifymembership.dynv6.net/assets/img/spotify-512.png","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"ip":{"addr":"62.4.29.80","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://my-spotifymembership.dynv6.net/signin","date":"2026-05-31T13:03:04.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my-spotifymembership.dynv6.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:56:27 GMT","end":"Fri, 28 Aug 2026 12:56:26 GMT"},"fingerprint":{"sha1":"6C:95:2F:4D:56:2E:52:B6:3E:D3:56:6D:4F:93:F1:5D:36:96:80:A4","sha256":"DD:64:FF:FF:FE:74:FB:BA:CE:CE:41:B7:1E:79:82:3C:43:E2:37:A2:32:8F:1C:67:EC:E8:F7:7D:9C:DF:80:08"}}},"request":{"raw":"GET /assets/img/spotify-512.png HTTP/1.1\r\nHost: my-spotifymembership.dynv6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://my-spotifymembership.dynv6.net/signin\r\nCookie: PHPSESSID=meqjcu2bbvkb3inbcq33ulqrg0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 17 May 2026 12:27:10 GMT\r\netag: \"4317-65202909ec380\"\r\naccept-ranges: bytes\r\ncontent-length: 17175\r\ncontent-type: image/png\r\ndate: Sun, 31 May 2026 13:03:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"77f1ec0898b8292448681bdbb3b26974","sha1":"658f725d47e6f3e00615f6e971fadd7627e67411","sha256":"8ea52cbe397ff054dc49413286c83922d8dcec38d4866723c8e7dd4e5ea8b855","sha512":"ba2cb8366b48d5c62b0286f333e04264f8bd36d45882390721a8994d8f1152691757d9fae417562243b39bb60f8c724993b32d911c0ee626b340d4fe599010d2","ssdeep":"384:8OlpIWZ0Nx47frDLThIkQd26VvgN/39VY6Jbtj2wVuMoBbj:8Olt007fXLXYZ4/taCbtaahAv","tlshash":"0472cf36e655c91fe7bad37276f61c70c1703218911a2de1f81eaf70a423b1d56b1c52","first_seen":"2026-05-31T13:03:28.449746Z","last_seen":"2026-05-31T13:55:10.716138Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://my-spotifymembership.dynv6.net/signin","date":"2026-05-31T13:03:04.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.8/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://my-spotifymembership.dynv6.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://my-spotifymembership.dynv6.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.8\r\nx-jsd-version-type: version\r\netag: W/\"13a70-afaIhYtxScVhxKH7xJbp5ms98v4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 13:03:04 GMT\r\nage: 1070622\r\nx-served-by: cache-fra-eddf8230051-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80496,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"5cc1b73e70520fa84b1846afe0ec8fb6","sha1":"69f688858b7149c561c4a1fbc496e9e66b3df2fe","sha256":"e4fd49181388c48ec5040bd3fe66f57c29c8e67fcd8502b3354b96ec7ab47cc7","sha512":"1ef3a326b7703690db9062481b664da83955a8ca3beea6ece0c7b871a8741e80eb7e1adb03ef12065667d4aaef010c3b7082cb3c526f770220a61cd098c9be3f","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08g:yNwhh+CywwWsXZg","tlshash":"7673d6593245b4730ade85a68037430bf2265898b64b812cb57cadde2a7dcc27277f78","first_seen":"2025-09-04T15:51:36.009011Z","last_seen":"2026-05-31T13:55:10.71765Z","times_seen":2657,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":86,"dns":30,"connect":26,"send":0,"wait":13,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my-spotifymembership.dynv6.net/assets/img/favicon.png","fqdn":"my-spotifymembership.dynv6.net","domain":"my-spotifymembership.dynv6.net","tld":"dynv6.net"},"ip":{"addr":"62.4.29.80","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://my-spotifymembership.dynv6.net/signin","date":"2026-05-31T13:03:04.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my-spotifymembership.dynv6.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 12:56:27 GMT","end":"Fri, 28 Aug 2026 12:56:26 GMT"},"fingerprint":{"sha1":"6C:95:2F:4D:56:2E:52:B6:3E:D3:56:6D:4F:93:F1:5D:36:96:80:A4","sha256":"DD:64:FF:FF:FE:74:FB:BA:CE:CE:41:B7:1E:79:82:3C:43:E2:37:A2:32:8F:1C:67:EC:E8:F7:7D:9C:DF:80:08"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: my-spotifymembership.dynv6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://my-spotifymembership.dynv6.net/signin\r\nCookie: PHPSESSID=meqjcu2bbvkb3inbcq33ulqrg0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 17 May 2026 12:26:00 GMT\r\netag: \"e3e-652028c72a600\"\r\naccept-ranges: bytes\r\ncontent-length: 3646\r\ncontent-type: image/png\r\ndate: Sun, 31 May 2026 13:03:04 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"326dfa6c84225dfca443693e985fdaab","sha1":"5a8971cb61bcdae6431abbba6d5a79cefc7d2d45","sha256":"0c7ee91862c795f69147f2174a919b1303dd28ce8ceccabe3f50ae219bfb01b7","sha512":"6e3718e274ac0a9f8a221d8ecdd10968eb6beadf11636ce83f05397d57615990e0a3fef3c6f158864ba691809bf8923249774a5932b0a9a8f829a8113ee98c7d","ssdeep":"","tlshash":"9e714cd6f6003e819b0c9a4236f110a3dc671991ecb0d326be99d8354ce14e50944bc7","first_seen":"2023-05-01T16:40:41Z","last_seen":"2026-05-31T13:55:10.707016Z","times_seen":14741,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"my-spotifymembership.dynv6.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - DynDNS domain","verdict":"suspicious","severity":"low","comment":"","tags":["dyndns"],"meta":null}]}}]}