{"report_id":"fe9d65f4-53b6-4bc9-a9c9-c8f1c11d5e73","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-09-27T02:56:41Z","url":{"schema":"http","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"title":"Netflix","dom":{"size":9447,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8332)","md5":"474bc9748d1b78fa804294fe3f5269fb","sha1":"ef8e3766ddbefb5eff45193e7ee71f8aab642ff4","sha256":"919454c1dc02e3c7a3d593a9aeeb4d9a1dbb8c394bd7a13cf8a79e9ae7e82a80","sha512":"8e7f2e99835b8378eb2304a36ae55a6d6121b01932673a38e06f4845fe29aebb65ee9a801c06b50ec860b17027aa41bca85e9800d491f1acaa8f606842241e36","ssdeep":"192:G/2aZu4nyW+shM2ZRENUAkLBI6dPIjFZJONvCeiickG6N3M2ZRENUAkLBIldHH:DEuIjvP+FZJONvNckG6Ns","tlshash":"d912d9b45920cd079c67699ee03daffd419a9e27fb12987871dcda00238adf80646e81","dom_hash":"domhash9a3821f2dd8807d8d89f3b45be57942b","first_seen":"2026-09-27T02:56:56.524451Z","last_seen":"2026-09-27T02:56:56.524451Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T02:56:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-09-24T00:03:48.912696Z","alert_count":0,"request_count":3,"received_data":2339417,"sent_data":2077,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"bb41f3adc177.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":3314,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"idoaiyf.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":50,"request_count":10,"received_data":388049,"sent_data":4772,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"746e77454640.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":3314,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-09-24T08:07:13.625594Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":44433,"first_seen":"2021-07-30T11:51:37Z","last_seen":"2026-09-25T14:52:30.217992Z","alert_count":0,"request_count":1,"received_data":357735,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-09-27T11:21:15.267586Z","times_seen":71408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/117-fbea2f3157fb49b7.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-09-27T10:31:20.750134Z","times_seen":2611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-09-27T10:41:40.815785Z","times_seen":66686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/730dc6d77da87c38eaa806dbc846a5129fc83ce20d3d792370504c8673876ec0/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2943d90ba97fbbfc8cd5053eeb63caf1","sha1":"634102e6338844d31321dd6a7e89be148c783473","sha256":"8cd4a062781f58a058a8054b82de9ba17c991d7818337a497c43337022c1c398","sha512":"68c21003f8a209f716eefc248594cc7d6ce5f7fa99480b919c54823b9f8331a62c34d84ddaeac346104f634245bddbc15a591b33d98e8e3e5003b314113a2db3","ssdeep":"24576:NquLytUVwAHdIg6lBzHYKyqty0AsY4AiiOtc/n6xzdXfY0pYX:N5Ig6lBDcr","tlshash":"a3353b7f5301aebbebb65579054a3d4b2d48046342a69ee4cd8e88f3a8811ffc4954fc","size":1079267,"data":"","first_seen":"2026-09-27T02:49:47.223602Z","last_seen":"2026-09-27T02:56:56.548308Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-27T11:47:09.193842Z","times_seen":435332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41dfef4bf26fbe46eeda8b9a305252d4","sha1":"d1223cf03cbef78391debe935caae24114ce6a2b","sha256":"eabed060df77b0978a199c07e95fc57bd3b56214795cee3070f264b64a9abe27","sha512":"edb0454fe7eb8dcacbaf3e5f99c4b91d1f721710330e7dfc7074d3c67433377e1234707fbac9fd5d5564616f01c6c1dc8a2588ff640ec204fb3a6f883e74d82a","ssdeep":"","tlshash":"1581a7ed7161f9b9178350e1403fd456b63b25b2295fe4a0ca1dd8f8fc349488523fa9","size":3996,"data":"","first_seen":"2026-08-22T02:28:37.813524Z","last_seen":"2026-09-27T02:56:56.542684Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0db07dafb93cbabf64b5bb5e1541e0e","sha1":"1bfa982cca5ce762b82267ab8783ddf26e1ebf05","sha256":"25f6465bc04537c305563e229e2d3567f30d3037c7b38ccaf25aed902e2fec6c","sha512":"c8b697b624b6334266a401aa6351734de7487340165620e5f8e8d861f1c87da70c269775dbc811d2bafa5c4af6768e73100356463c4e56d4f34e2387ed16dacc","ssdeep":"6144:7wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey9:sIyva1Z0s6iPUZR9","tlshash":"54d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","size":627094,"data":"","first_seen":"2026-09-24T16:09:41.847403Z","last_seen":"2026-09-27T11:21:15.272619Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/145-bdd25006a2550177.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","size":14205,"data":"","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-09-27T02:56:56.537058Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-09-27T11:35:34.690337Z","times_seen":107099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4722e3658d82db61e6e87b4a6cfb82a","sha1":"cedbd1c9f983cbe45e77c489e2c897b2d8ed9591","sha256":"7227ee53dc12dea75e5e7651ba56e7bd1ca7a2d12d4ddbd4dfa2457cbca2acd5","sha512":"e1264c1a18aa58ce059cc04e27c172fd6247544da1244b50b9e4b1d8feec82136686c52f5c500ab91d9c79df4d6a6871f7dfc51a03a4f497b68736c5de5a62c5","ssdeep":"","tlshash":"68a01298d041dc1ac130000704284800c2ccd40c03a0405413b4cac68001c781684d85","size":86,"data":"","first_seen":"2026-08-22T02:28:37.827075Z","last_seen":"2026-09-27T02:56:56.551786Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e54de2a8b13ece1886ff4143ce39a61","sha1":"7df6f9f14ea15013b84433fefcdc63231d79e7cf","sha256":"fa8061a7958eed82a0fbc9aff1a665a74bbbbe8266fa011a7e474af94a344547","sha512":"64730d3047655a41e51f4afa2056ed0ff6dfd5328c2a4c6530886ef08b031d419843f5c668a21452e59ae0f6b53a9b874e776287cc3e36672668e992baafe397","ssdeep":"","tlshash":"7841777ea901dd4bdcbd3d9a463e9c3664cc883b1761c9b881dece0817064b927dad80","size":2020,"data":"","first_seen":"2026-08-26T12:20:34.298541Z","last_seen":"2026-09-27T02:56:56.552987Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a7206db1994b57e639a1f8bd6bd39a9","sha1":"2073aaa88feb224242b5b6f46571556c6a006551","sha256":"ee98c27f81a1d9566d593e9e163c6469af170ae964dec966e8305c724fc01483","sha512":"54ea96a8d33ac3afc88fc9ef34975a7630a8f082aea24f424d8cd320f9a9dd2ca2582bb36825aebcdddf8e35dc16b834c673d0d962b132cecc1a7eb9332f9a8d","ssdeep":"","tlshash":"b4e0cd619c01dd1dc75b5f651c3f1c7920ddc3794245964699c4dd140943e754af2ec5","size":316,"data":"","first_seen":"2026-01-13T00:15:05.629311Z","last_seen":"2026-09-27T02:56:56.553714Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/fd9d1056-2318c61901700e02.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-09-27T10:31:20.749616Z","times_seen":5179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"542047d5519f8f7786da3347cacd50f1","sha1":"26126775ecd7dc31220350803c52a7906f5b7f84","sha256":"044864a3a23637e127e34fb229fb61ad454086cdcddc913be30cf177d1808f2d","sha512":"a95b0d5e19779e50e983254ac5cffb26bd6f0245baf36a4d931a9c8edfdba26ebcc7e331a13c32504e6002f7a8d5ee3e353fe6d85d2340f9eb90c38498b7f78b","ssdeep":"","tlshash":"699004dd34c370104753115400571cc4f074dc70144c4d40c04cd4511cd5030711d45c","size":39,"data":"","first_seen":"2023-05-12T18:19:29Z","last_seen":"2026-09-27T11:21:15.273202Z","times_seen":4076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d783f62c9cb4705d2068bfade4ced76d","sha1":"d4431990ade0a3e558ec3be9e299f6b61f82d2ab","sha256":"d747b6beef0ca7b2f71c4b44aef67dd962f9c9f903195a2ac1a835d2ed5c343c","sha512":"42c4f257eb120e2c92bb7a756a76fc2e38d734a6852c3fae8b2f9774d655953af5184ed3cbe27b0e496ae4c3ad82aebd51f6b566117ab545c9d7566cb42429c9","ssdeep":"3072:RwPGndFHHeP+u4RCZMfubd1mWhor7C/jnLyZRl6PS:RwPCpy+uS2bd1mWhorernO","tlshash":"e3744f7f2315526f62f402d140da931b67f5c436202c605eafb3aceebc5ca4724796ba","size":356869,"data":"","first_seen":"2026-09-24T15:36:58.241465Z","last_seen":"2026-09-27T11:21:15.26372Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad0b796ed2af68e4a9427ce47fb8f1f","sha1":"5ba87d76dbec72159a399b970fb3fd7b2ad0f2eb","sha256":"22097bb91b759c4929711ff5ba50549d2cab61ff0c36cb371ce3ac5f110a5e17","sha512":"bd14ddb4e17c9432a19e1bd687d61750d9f0a5d69a8c4ed284b0410b70a5e76a29b59cb5aee53f3f47c56ad28ee092a485882eaaae169da21167c075c3492f96","ssdeep":"384:4Hp1JSk5hwNgtHZ9EqInwWvpAk0/vWZ8bKuSLrIUvVzMVRLtkuebqLeU0v1/z0v/:sgg39EqInwWvCk0y8bKBIUvVzMVRJVeY","tlshash":"22a24ab5b291f4782a721971913f484ee33f5b39dc0ec028f568f9d636645c8a12afb4","size":22408,"data":"","first_seen":"2026-08-22T02:28:37.820493Z","last_seen":"2026-09-27T02:56:56.543837Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","size":461,"data":"","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-09-27T10:31:20.741808Z","times_seen":1933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=checkbox\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0db07dafb93cbabf64b5bb5e1541e0e","sha1":"1bfa982cca5ce762b82267ab8783ddf26e1ebf05","sha256":"25f6465bc04537c305563e229e2d3567f30d3037c7b38ccaf25aed902e2fec6c","sha512":"c8b697b624b6334266a401aa6351734de7487340165620e5f8e8d861f1c87da70c269775dbc811d2bafa5c4af6768e73100356463c4e56d4f34e2387ed16dacc","ssdeep":"6144:7wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey9:sIyva1Z0s6iPUZR9","tlshash":"54d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","size":627094,"data":"","first_seen":"2026-09-24T16:09:41.847403Z","last_seen":"2026-09-27T11:21:15.272619Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/730dc6d77da87c38eaa806dbc846a5129fc83ce20d3d792370504c8673876ec0/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-27T02:56:08.584Z","timestamp":1790477768584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /c/730dc6d77da87c38eaa806dbc846a5129fc83ce20d3d792370504c8673876ec0/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html\r\nCookie: __cf_bm=abh2UZobh_jMqez9PJVDas8xFm15N2rNANpj.iPnL6Q-1790477768.1055403-1.0.1.1-Q1RrZtPcHp.h8ZBzqJ1lqEFT3hygAR0dt9VLrsrS4IPRuT76mo0oOhEejsPzaFl6XoPBUQoOoYI6qg3FtzuU_CUH1lacUcEM81MyFwfBFqEuBhAOfYN73ANpCPgjqS8i\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\ndate: Sun, 27 Sep 2026 02:56:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3024000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\netag: W/\"2943d90ba97fbbfc8cd5053eeb63caf1\"\r\nvary: Accept-Encoding, Origin\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a4173bc5adde5693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1079267,"size_decoded":459850,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"05acb2a7b39ac1bca710a198736d478d","sha1":"b4db28341a7b81aa95a33afed5de611917a1a00f","sha256":"df80d320d04e3956b9b4365a119b71492b54b2bca7e597e2bd5930e1ea2a4df5","sha512":"9a250ebe701378f634e4564e79c6aad9ed902f4f59be6289c4dbbc1efd7ceab20b977728573d6ce79d31cedf941abf627b6ee6f6be925f900d828a3f2b3d3cca","ssdeep":"24576:NquLytUVwAHdIg6lBzHYKyqty0AsY4AiiOtc/n6xzdXfY0y:N5Ig6lBDcx","tlshash":"38252abf53019ebbebb6557d454a3d4b2c48046342a69ee48d8e88f3a8811ffc4954fc","first_seen":"2026-09-27T02:49:47.208401Z","last_seen":"2026-09-27T02:56:56.527176Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bb41f3adc177.w.hcaptcha.com/logo.png","fqdn":"bb41f3adc177.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:08.073Z","timestamp":1790477768073,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bb41f3adc177.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://idoaiyf.com/\r\nOrigin: https://idoaiyf.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 02:56:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=XALSKABzx_i4Ilr9VVF1lSX47uqoPSs9x8KFLRjgg6k-1790477768.1162148-1.0.1.1-CPhG7jgYNzMNdlD5WagH9wb5KfpFty6ohTq9pLOA_qbz46_yQiODy73pHf2eDVN3EL1_IKRW0pBk2Pb3OboESiJ1zlWNNHfXSRJ7aWdb8zBKS8zv3ZJJ9bUrHgqFdLzf; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT\r\nServer: cloudflare\r\nCF-RAY: a4173bc2ba16c759-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"XALSKABzx_i4Ilr9VVF1lSX47uqoPSs9x8KFLRjgg6k-1790477768.1162148-1.0.1.1-CPhG7jgYNzMNdlD5WagH9wb5KfpFty6ohTq9pLOA_qbz46_yQiODy73pHf2eDVN3EL1_IKRW0pBk2Pb3OboESiJ1zlWNNHfXSRJ7aWdb8zBKS8zv3ZJJ9bUrHgqFdLzf","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-27T03:26:08Z","raw_expires":"Sun, 27 Sep 2026 03:26:08 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=XALSKABzx_i4Ilr9VVF1lSX47uqoPSs9x8KFLRjgg6k-1790477768.1162148-1.0.1.1-CPhG7jgYNzMNdlD5WagH9wb5KfpFty6ohTq9pLOA_qbz46_yQiODy73pHf2eDVN3EL1_IKRW0pBk2Pb3OboESiJ1zlWNNHfXSRJ7aWdb8zBKS8zv3ZJJ9bUrHgqFdLzf; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"8354a446eb8034cfe143f5b41c9c06fd","sha1":"cb200daa73f217751a25478cf1db4b9f55f7b013","sha256":"7597a6f0a062882213421b9012a47e367624d98174950fb35326c860c284fcfb","sha512":"6ef987c2c8bc5652d61eadca762148397a880c6d5202db1651621e377470705ddb738ac328d26f7e2b8466fade7ea64cb466e886ea0162d53bb0a5f1ebcc1c12","ssdeep":"","tlshash":"b75185437f44424ad40e0f5224b45f07e17aef6d7b2d324b3921b93c6eaa3e7282a180","first_seen":"2026-09-27T02:56:56.530506Z","last_seen":"2026-09-27T02:56:56.530506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":11,"connect":5,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=checkbox\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:08.094Z","timestamp":1790477768094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=abh2UZobh_jMqez9PJVDas8xFm15N2rNANpj.iPnL6Q-1790477768.1055403-1.0.1.1-Q1RrZtPcHp.h8ZBzqJ1lqEFT3hygAR0dt9VLrsrS4IPRuT76mo0oOhEejsPzaFl6XoPBUQoOoYI6qg3FtzuU_CUH1lacUcEM81MyFwfBFqEuBhAOfYN73ANpCPgjqS8i; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT\r\ndate: Sun, 27 Sep 2026 02:56:08 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: a4173bc2adc25693-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"abh2UZobh_jMqez9PJVDas8xFm15N2rNANpj.iPnL6Q-1790477768.1055403-1.0.1.1-Q1RrZtPcHp.h8ZBzqJ1lqEFT3hygAR0dt9VLrsrS4IPRuT76mo0oOhEejsPzaFl6XoPBUQoOoYI6qg3FtzuU_CUH1lacUcEM81MyFwfBFqEuBhAOfYN73ANpCPgjqS8i","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-27T03:26:08Z","raw_expires":"Sun, 27 Sep 2026 03:26:08 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=abh2UZobh_jMqez9PJVDas8xFm15N2rNANpj.iPnL6Q-1790477768.1055403-1.0.1.1-Q1RrZtPcHp.h8ZBzqJ1lqEFT3hygAR0dt9VLrsrS4IPRuT76mo0oOhEejsPzaFl6XoPBUQoOoYI6qg3FtzuU_CUH1lacUcEM81MyFwfBFqEuBhAOfYN73ANpCPgjqS8i; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":628846,"size_decoded":191952,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"92f99ddc466a768d1b2af964b57ffb84","sha1":"7085051a4ff2cd894091f45e143485249ab9ab15","sha256":"04e6751b502f3e0ab603b386100b23ac25e7881d3728fb00161c0260b541c33d","sha512":"11e3182bdc97af19c7d735df8e492ba4bdc38003aa10f10811002cd76fe25f4206a66886155aee55c7f0e9e28f402b918719f018e3e8bbeb3ae1ecd1319f33f1","ssdeep":"6144:5wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey8:yIyva1Z0s6iPUZR8","tlshash":"91d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","first_seen":"2026-09-24T16:09:41.47706Z","last_seen":"2026-09-27T11:21:15.258049Z","times_seen":245,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":19,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/fd9d1056-2318c61901700e02.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.491Z","timestamp":1790477767491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-2318c61901700e02.js HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1415803\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-2318c61901700e02.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"d70ea42503ecdf865cc5b50951e7a260\"\r\nlast-modified: Thu, 10 Sep 2026 17:39:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/fd9d1056-2318c61901700e02.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ndjpb-1790477767497-e890634549a1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172834,"size_decoded":55673,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-09-27T10:31:20.749616Z","times_seen":5179,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"idoaiyf.com/logo.svg","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.512Z","timestamp":1790477767512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 2084973\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"c905c3b37c2c591f2beb56f5f3eb136e\"\r\nlast-modified: Wed, 02 Sep 2026 23:46:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logo.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9fmsm-1790477767518-5c4785a73f4d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18259,"size_decoded":8777,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c905c3b37c2c591f2beb56f5f3eb136e","sha1":"01f46cfeb0a788d81bf98ff696cf3632a03404b6","sha256":"f45548a5194f4c9a8306f65111c54e15142315151d5a0934443be64d258f123c","sha512":"64da790e9a2ee5554b3ebc8caba517ab8e38c51e4a4dae48badfdc1541f8af08868b2b4459fcaf83bd5ea8c75207ed8e1f308b9228213e30c74b996b5b95f744","ssdeep":"384:OAU9qSSPZTnpZji3lqyJiRRVKbU7MPyYmA8lL1rXK:ykPZLDi3lPJibVKbw0ilNa","tlshash":"6c82f9dd736488f8cc0ed7c2ada258e43e5b60b72f85c22cc969e791152316dd98acc7","first_seen":"2026-08-22T02:28:37.821801Z","last_seen":"2026-09-27T02:56:56.533144Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"746e77454640.w.hcaptcha.com/logo.png","fqdn":"746e77454640.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-27T02:56:08.325Z","timestamp":1790477768325,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 746e77454640.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 02:56:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=y16TQMFfiCqOkKYq.5ISyLLPrWCQCpQEvmO2uDE.Png-1790477768.3453968-1.0.1.1-_YvBoqQbkBcZEjApvyhofokdBryi1ersoM8cIwMcmO_KApJ0Ht3Ajv2G9TPtwPhrcZyOw8QaSAN0SweXA.UWfFupvUlzhKAW2WP69rat3fS6H3KXrE2xS0Dx4idv5rYu; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT\r\nServer: cloudflare\r\nCF-RAY: a4173bc4290e56bb-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"y16TQMFfiCqOkKYq.5ISyLLPrWCQCpQEvmO2uDE.Png-1790477768.3453968-1.0.1.1-_YvBoqQbkBcZEjApvyhofokdBryi1ersoM8cIwMcmO_KApJ0Ht3Ajv2G9TPtwPhrcZyOw8QaSAN0SweXA.UWfFupvUlzhKAW2WP69rat3fS6H3KXrE2xS0Dx4idv5rYu","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-27T03:26:08Z","raw_expires":"Sun, 27 Sep 2026 03:26:08 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=y16TQMFfiCqOkKYq.5ISyLLPrWCQCpQEvmO2uDE.Png-1790477768.3453968-1.0.1.1-_YvBoqQbkBcZEjApvyhofokdBryi1ersoM8cIwMcmO_KApJ0Ht3Ajv2G9TPtwPhrcZyOw8QaSAN0SweXA.UWfFupvUlzhKAW2WP69rat3fS6H3KXrE2xS0Dx4idv5rYu; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"e3af8700688a8675d9088bb1fc06f05f","sha1":"7b7117db338a68b64003c3dc42d4ce24e3a16170","sha256":"38dc60915d05a591da264537ad848700fa84e937b5f1e25b4f2422692ff43618","sha512":"13a89a15d7b861a51fb337b6da5518173602d649a9b5676993aa2644e86f0472b625d3f0087318edffad5a397859a5f58fd8a9a91c1b6bdb7c364531b058cfcf","ssdeep":"","tlshash":"735166929f04c18be52f5fb1517b1f3a7273c5593b2e138b5525b5accfd23c2151a680","first_seen":"2026-09-27T02:56:56.533745Z","last_seen":"2026-09-27T02:56:56.533745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":11,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/117-fbea2f3157fb49b7.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.493Z","timestamp":1790477767493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/chunks/117-fbea2f3157fb49b7.js HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1415803\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"117-fbea2f3157fb49b7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"d13e87eb771cb1dc6c862544c92dd720\"\r\nlast-modified: Thu, 10 Sep 2026 17:39:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/117-fbea2f3157fb49b7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9fmsm-1790477767499-7b2308cebd5e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":124364,"size_decoded":33554,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-09-27T10:31:20.750134Z","times_seen":2611,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/145-bdd25006a2550177.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.497Z","timestamp":1790477767497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/chunks/145-bdd25006a2550177.js HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1394635\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"145-bdd25006a2550177.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"9ee423bfd61fe11f929f20babc9fac04\"\r\nlast-modified: Thu, 10 Sep 2026 23:32:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/145-bdd25006a2550177.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lmx44-1790477767502-26f49ce512f7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14205,"size_decoded":6133,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14205), with no line terminators","md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-09-27T02:56:56.537058Z","times_seen":61,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=33e17445452ab4888e3f4665a714b729e48a7a2e\u0026host=idoaiyf.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-27T02:56:08.553Z","timestamp":1790477768553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"POST /checksiteconfig?v=33e17445452ab4888e3f4665a714b729e48a7a2e\u0026host=idoaiyf.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=abh2UZobh_jMqez9PJVDas8xFm15N2rNANpj.iPnL6Q-1790477768.1055403-1.0.1.1-Q1RrZtPcHp.h8ZBzqJ1lqEFT3hygAR0dt9VLrsrS4IPRuT76mo0oOhEejsPzaFl6XoPBUQoOoYI6qg3FtzuU_CUH1lacUcEM81MyFwfBFqEuBhAOfYN73ANpCPgjqS8i\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 02:56:08 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-ray: a4173bc57ddd5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":1245,"mime_type":"application/json","magic":"JSON text data","md5":"7a6c4a16a507bc77b30383421e79a3e0","sha1":"c7bf3a4ccc48c6223b52b2b88d1f12b09b369af4","sha256":"18054fcfac534f2c6a33f589c19d086bd9b66c9cf038ab5324123a230e6eb2be","sha512":"cdf977a34d8d85633cd78149ad6774e7f0410071bd93ec401eb8c28a632fbcbcce4365424dc616e1791784ac4a818942e33f4a88cd1987ec0f4a33ad96d74099","ssdeep":"","tlshash":"460186d122802a336b9efe1a2a6a6b0d0991155141e5fc693ecd58225e9f28c6d10736","first_seen":"2026-09-27T02:56:56.540655Z","last_seen":"2026-09-27T02:56:56.540655Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0ye0qsx4bvf\u0026host=idoaiyf.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fidoaiyf.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:08.092Z","timestamp":1790477768092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=SvPy.jCiCneyaqKkUJAezmv7OzFNph7xsOguBwETSls-1790477768.1055875-1.0.1.1-I3FtAfT6mJLh4LR36U07ZOVNSQTBSOuTBIQA.FoOL5V2cmz5EtxHL5kELlepA.OkgGeAl8hTawPMyDVYx1WSz1z.MlITk4.YRsHPvmHmM6fczUOLQ3FKngf4LjcwKNav; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT\r\ndate: Sun, 27 Sep 2026 02:56:08 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: a4173bc2adc15693-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"SvPy.jCiCneyaqKkUJAezmv7OzFNph7xsOguBwETSls-1790477768.1055875-1.0.1.1-I3FtAfT6mJLh4LR36U07ZOVNSQTBSOuTBIQA.FoOL5V2cmz5EtxHL5kELlepA.OkgGeAl8hTawPMyDVYx1WSz1z.MlITk4.YRsHPvmHmM6fczUOLQ3FKngf4LjcwKNav","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-27T03:26:08Z","raw_expires":"Sun, 27 Sep 2026 03:26:08 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=SvPy.jCiCneyaqKkUJAezmv7OzFNph7xsOguBwETSls-1790477768.1055875-1.0.1.1-I3FtAfT6mJLh4LR36U07ZOVNSQTBSOuTBIQA.FoOL5V2cmz5EtxHL5kELlepA.OkgGeAl8hTawPMyDVYx1WSz1z.MlITk4.YRsHPvmHmM6fczUOLQ3FKngf4LjcwKNav; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:08 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":628846,"size_decoded":192114,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"92f99ddc466a768d1b2af964b57ffb84","sha1":"7085051a4ff2cd894091f45e143485249ab9ab15","sha256":"04e6751b502f3e0ab603b386100b23ac25e7881d3728fb00161c0260b541c33d","sha512":"11e3182bdc97af19c7d735df8e492ba4bdc38003aa10f10811002cd76fe25f4206a66886155aee55c7f0e9e28f402b918719f018e3e8bbeb3ae1ecd1319f33f1","ssdeep":"6144:5wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey8:yIyva1Z0s6iPUZR8","tlshash":"91d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","first_seen":"2026-09-24T16:09:41.47706Z","last_seen":"2026-09-27T11:21:15.258049Z","times_seen":245,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":11,"dns":8,"connect":0,"send":0,"wait":15,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/css/d47519fb6e684b99.css","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.488Z","timestamp":1790477767488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/css/d47519fb6e684b99.css HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1471221\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d47519fb6e684b99.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"62fc6eb70c9e057f8902fdddd696b31d\"\r\nlast-modified: Thu, 10 Sep 2026 02:15:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/d47519fb6e684b99.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hbx69-1790477767494-8ca7812dc85e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16158,"size_decoded":4854,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16158), with no line terminators","md5":"62fc6eb70c9e057f8902fdddd696b31d","sha1":"10006771caa1caa8fc17eb7cb3c95813cc5c9a80","sha256":"0b1288c96b78bc6cc9d7d3adeaddf2f5276dd754d456ec290f0d5e14ab4065f7","sha512":"34bc83ae94a27db403f7ea38f2d4f2f460b3b4b86a5075b0e3844aa1813964b9f6704dbd5aebc755b427faac73cfe1b02bc0a6dcc24cd19962f6130c66080e43","ssdeep":"192:oGw2s7JXYS7JXYGDxsf02aZ79eqrrtIO6:/w9HFDQaZ5eqrZi","tlshash":"0b72621dab15043b7c2780f6e5a4ee9cb016a2c5df3ae6e7b9422600dbd63f31d93644","first_seen":"2026-08-22T02:28:37.817706Z","last_seen":"2026-09-27T02:56:56.542095Z","times_seen":16,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.490Z","timestamp":1790477767490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/chunks/webpack-616e068a201ad621.js HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 2731764\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-616e068a201ad621.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"41dfef4bf26fbe46eeda8b9a305252d4\"\r\nlast-modified: Wed, 26 Aug 2026 12:06:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-616e068a201ad621.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7xztz-1790477767495-bc6ba0342de3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3996,"size_decoded":2558,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3557)","md5":"41dfef4bf26fbe46eeda8b9a305252d4","sha1":"d1223cf03cbef78391debe935caae24114ce6a2b","sha256":"eabed060df77b0978a199c07e95fc57bd3b56214795cee3070f264b64a9abe27","sha512":"edb0454fe7eb8dcacbaf3e5f99c4b91d1f721710330e7dfc7074d3c67433377e1234707fbac9fd5d5564616f01c6c1dc8a2588ff640ec204fb3a6f883e74d82a","ssdeep":"","tlshash":"1581a7ed7161f9b9178350e1403fd456b63b25b2295fe4a0ca1dd8f8fc349488523fa9","first_seen":"2026-08-22T02:28:37.813524Z","last_seen":"2026-09-27T02:56:56.542684Z","times_seen":8,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.495Z","timestamp":1790477767495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2dcde4753ea0d175.js HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1415804\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2dcde4753ea0d175.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: \"ace3268523ca829896f160bf5401feab\"\r\nlast-modified: Thu, 10 Sep 2026 17:39:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-2dcde4753ea0d175.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4b9c-1790477767501-9a0430bd3391\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":461,"size_decoded":1085,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-09-27T10:31:20.741808Z","times_seen":1933,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"idoaiyf.com/_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.507Z","timestamp":1790477767507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1415803\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-8bcc90ceeb914f5c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"5ad0b796ed2af68e4a9427ce47fb8f1f\"\r\nlast-modified: Thu, 10 Sep 2026 17:39:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4b9c-1790477767513-e069eea9cf71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22408,"size_decoded":9242,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14925)","md5":"5ad0b796ed2af68e4a9427ce47fb8f1f","sha1":"5ba87d76dbec72159a399b970fb3fd7b2ad0f2eb","sha256":"22097bb91b759c4929711ff5ba50549d2cab61ff0c36cb371ce3ac5f110a5e17","sha512":"bd14ddb4e17c9432a19e1bd687d61750d9f0a5d69a8c4ed284b0410b70a5e76a29b59cb5aee53f3f47c56ad28ee092a485882eaaae169da21167c075c3492f96","ssdeep":"384:4Hp1JSk5hwNgtHZ9EqInwWvpAk0/vWZ8bKuSLrIUvVzMVRLtkuebqLeU0v1/z0v/:sgg39EqInwWvCk0y8bKBIUvVzMVRJVeY","tlshash":"22a24ab5b291f4782a721971913f484ee33f5b39dc0ec028f568f9d636645c8a12afb4","first_seen":"2026-08-22T02:28:37.820493Z","last_seen":"2026-09-27T02:56:56.543837Z","times_seen":14,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"idoaiyf.com/favicon.ico","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.547Z","timestamp":1790477767547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/hcaptcha\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\nage: 1437984\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"0facbb561e08803b6edac11e8b14870b\"\r\nlast-modified: Thu, 10 Sep 2026 11:29:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9fmsm-1790477767558-1dadb6fc2ebf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3599,"size_decoded":1774,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3593), with no line terminators","md5":"0facbb561e08803b6edac11e8b14870b","sha1":"620b41e08b5e860d1f071322ddf78c35f5c53704","sha256":"b13ccd29809e739361e9c171a87c14d69c3d27c0f5bb5d48e892fb097242b8b7","sha512":"d8c912779d642e3398988c27017de2b0c99bfea74699139ba1d0a287894917239f07f3ccc11cae148de88843c86a9011729885dbbbf06e307e30f21428642537","ssdeep":"","tlshash":"a471e2bb9c02dd4bdd7a3d69043eac3a14ddc83b8b25c96846ddce0917426792bcadc0","first_seen":"2026-08-22T02:28:37.815973Z","last_seen":"2026-09-27T02:56:56.544346Z","times_seen":8,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://idoaiyf.com/hcaptcha","date":"2026-09-27T02:56:07.829Z","timestamp":1790477767829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /1/api.js?onload=hCaptchaOnLoad\u0026render=explicit HTTP/1.1\r\nHost: js.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://idoaiyf.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://idoaiyf.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncf-ray: a4173bc1c8d5723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=fCcdatbgH5JbRz1Iu22ZrlOJ.urle8rHNTFEup.xupw-1790477767.9697974-1.0.1.1-Jn4wE0.eZhW3KUY3GBOU6VDEdlEnGnjExg.R1cskEXEGVGqUap7.U8elkWwjX3kTbsxPyyB_mcpVptx_ceKPQYGLD_BZ5ifySl0mMJh9r143qVtXF1xXM7uDfVbfHq7g; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:07 GMT\r\ncache-control: max-age=300\r\netag: W/\"11bfbf33fce54770b1090b81b78d96a0\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"fCcdatbgH5JbRz1Iu22ZrlOJ.urle8rHNTFEup.xupw-1790477767.9697974-1.0.1.1-Jn4wE0.eZhW3KUY3GBOU6VDEdlEnGnjExg.R1cskEXEGVGqUap7.U8elkWwjX3kTbsxPyyB_mcpVptx_ceKPQYGLD_BZ5ifySl0mMJh9r143qVtXF1xXM7uDfVbfHq7g","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-27T03:26:07Z","raw_expires":"Sun, 27 Sep 2026 03:26:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=fCcdatbgH5JbRz1Iu22ZrlOJ.urle8rHNTFEup.xupw-1790477767.9697974-1.0.1.1-Jn4wE0.eZhW3KUY3GBOU6VDEdlEnGnjExg.R1cskEXEGVGqUap7.U8elkWwjX3kTbsxPyyB_mcpVptx_ceKPQYGLD_BZ5ifySl0mMJh9r143qVtXF1xXM7uDfVbfHq7g; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:26:07 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":356869,"size_decoded":102834,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"d783f62c9cb4705d2068bfade4ced76d","sha1":"d4431990ade0a3e558ec3be9e299f6b61f82d2ab","sha256":"d747b6beef0ca7b2f71c4b44aef67dd962f9c9f903195a2ac1a835d2ed5c343c","sha512":"42c4f257eb120e2c92bb7a756a76fc2e38d734a6852c3fae8b2f9774d655953af5184ed3cbe27b0e496ae4c3ad82aebd51f6b566117ab545c9d7566cb42429c9","ssdeep":"3072:RwPGndFHHeP+u4RCZMfubd1mWhor7C/jnLyZRl6PS:RwPCpy+uS2bd1mWhorernO","tlshash":"e3744f7f2315526f62f402d140da931b67f5c436202c605eafb3aceebc5ca4724796ba","first_seen":"2026-09-24T15:36:58.241465Z","last_seen":"2026-09-27T11:21:15.26372Z","times_seen":273,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":126,"connect":11,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"idoaiyf.com/hcaptcha","fqdn":"idoaiyf.com","domain":"idoaiyf.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T02:56:07.127Z","timestamp":1790477767127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.idoaiyf.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Aug 2026 03:40:35 GMT","end":"Mon, 16 Nov 2026 03:40:34 GMT"},"fingerprint":{"sha1":"29:BC:EC:70:3A:2E:27:4B:94:2E:7D:FD:9B:D5:E7:09:A1:4F:A6:43","sha256":"D3:65:4F:93:7A:80:EC:8B:BF:DE:BB:24:70:3D:F2:96:3F:99:32:AC:47:2C:86:9F:26:89:99:CA:DB:E6:C2:F7"}}},"request":{"raw":"GET /hcaptcha HTTP/1.1\r\nHost: idoaiyf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 162902\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:56:07 GMT\r\netag: W/\"f2dc59b4fb6ee2833a8bf62125dfe7a4\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /hcaptcha\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p7wkh-1790477767198-5973b31bd109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5968,"size_decoded":2818,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4664)","md5":"dce3cb2c50ffe0b5d7f9f728cdca4034","sha1":"3597f1dd335434c646123849f49b5e45112ff28e","sha256":"b7e5bb1ddd72dc49073327637af4747048675478aea6c5aa78d4a3a01206c010","sha512":"7110e500e3cb1b0a9ce6a85cbda873e29b790627ba51d455ec396feb741005eeec805ab70c47e5862d1ffb7807233e6846d4b27c89ff7724cf5bb4dd1a9a48bd","ssdeep":"96:TmLuyaMPOH9nyWraQZZwNowICq+p1GjvNZhrONvCI0ggUcEiickgn4ggCzWfEJ9B:8HaUOH9nyWePBfIjFZJONvCeiickG6u","tlshash":"2dc1747a9c01cd0bda736ade143aed3d11ddc87bca16cd6862ecce590745eb80b89d80","first_seen":"2026-08-26T12:20:34.280762Z","last_seen":"2026-09-27T02:56:56.545314Z","times_seen":6,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":31,"connect":1,"send":0,"wait":11,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"idoaiyf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"idoaiyf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}