{"report_id":"004df58e-1c1e-4522-b8fa-15c4296b1f1d","version":0,"status":"done","tags":[],"date":"2026-09-19T08:30:14Z","url":{"schema":"http","addr":"protonvpnx.com/","fqdn":"protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.protonvpnx.com/","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"title":"Proton VPN下载 - Windows、macOS、Android与iOS客户端","dom":{"size":21245,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1606)","md5":"2c2907ddf7c1494b9cbc9dfd1cf9c446","sha1":"f7598389c422182f02cb3e47cc44b6b8633d2380","sha256":"ad6d213b804e01873ebe9e9405e086a567a0521f91be7d3be66269d0ca7b8295","sha512":"fb954e537222489f9ca9bcce2cfaea5ab21df17415ef1d66c3332bfec8455a7236189f6a660b0440820a4ee53df408f9f08eefc0070cc8790b9f0def6e39c96c","ssdeep":"384:BMC2KjwiIoiQr0Cb33d18mcSGCEQBaBKLqE2PDzrOD9a9W9BX4tBjqUDSfqoSf3y:wiIMvKYLqE2PDfOFO6HwSE+","tlshash":"1892e873d3f0b82f126757c5726bf36ea2afa60be8614484fab947d45bdacd05803046","dom_hash":"domhash652c304c79434054c4b5f8cd53b218f3","first_seen":"2026-09-19T07:42:43.933704Z","last_seen":"2026-09-19T08:30:16.52044Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"protonvpnx.com/","fqdn":"protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:30:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.protonvpnx.com","ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-31","domain_rank":0,"first_seen":"2026-09-19T07:42:40.014906Z","last_seen":"2026-09-19T07:42:40.014906Z","alert_count":22,"request_count":11,"received_data":137262,"sent_data":6124,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protonvpnx.com","ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-31","domain_rank":0,"first_seen":"2026-09-19T08:30:15.012746Z","last_seen":"2026-09-19T08:30:15.012746Z","alert_count":2,"request_count":1,"received_data":913,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/js/site.js","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c3bc6ad918828ef896441811ca7ff95","sha1":"b665be595f319a766d80cbf59a638c1bfa5f6d8e","sha256":"2d42676343b43f49f474b46f2fae38af78ee2559982744c869f936ba477bdf64","sha512":"ca0bd83d001f0ef6c6f44994a506750e0115336b1635e328422c07f3dcdc3bea088fb54538c98695102c173271fc2a7b52f7b9c21cb474f7c39eb9b17eb644f1","ssdeep":"","tlshash":"64f07d3be20004774ca645d6ead556f4beb000aab5036865a67ccdc5205ec432c34cf8","size":635,"data":"","first_seen":"2026-09-19T07:42:43.937306Z","last_seen":"2026-09-19T08:30:16.530651Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/package-download-20260907.js","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"acb4d66e76f78b1a30ec2fb5e0ac6b2e","sha1":"e7f8fcf0bd4fe1ae82191e0d9eb9d49cc2eef24a","sha256":"fe115590649da50f7b36a90a62e6b25223a83127ebc78352c1782c8442db3607","sha512":"f55da75df8869260bf96c45293ea0eafeb62540e2c41c7f4159c9eb70ee06527e24f8887db31ba844dcb9fc9d1f6bbcdd940f214702d131288d58f0ae1602c7c","ssdeep":"","tlshash":"4131fe6f847654255633901e2bdae3ca333b10477003e60d7dad65087ff1a1561d9a9b","size":1686,"data":"","first_seen":"2026-09-11T19:30:51.391658Z","last_seen":"2026-09-19T08:30:16.528437Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/logo/protonvpnx-mark.svg?v=20260801t1","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.018Z","timestamp":1789806586018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/logo/protonvpnx-mark.svg?v=20260801t1 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 01 Aug 2026 10:13:59 GMT\r\npriority: u=5,i\r\nexpires: Mon, 19 Oct 2026 07:42:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"6a6dc6e7-20b\"\r\nage: 2860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsAzo3bUjWNUpkzqUb4KVkXOUeaXxfyiqQp%2BPzTAkStQ9VB53CFNKJ2bxvyQKLnWjuSpT3XDWWqxGr8JYUEAvnw%2F2l8UIJGfrqZse8vPK4SzjM0bcIWYgnkUjB0Rg05AioI1MsA%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d7397a9f11b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":1100,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3a8d4d7eaa0f5663ac05fa564e06a3c","sha1":"7d92b98dd7dd27dfe9c537a0edc06a12a21eb8eb","sha256":"93d22392b759bb4762fa17a604a0ff23b81f1ee85761bcdb02de1eb6e064f3be","sha512":"751699ac54e5a8b3c1aca3643a678d6eb559fbd999343615eadb76f5fd8c39b202551402fff2285ac4228d16638d2dd0f22c7a62e17c72f25765e8b7c348570b","ssdeep":"","tlshash":"dff00ebaf4a97cabd94fc678ac4800d5951e525514c0c3a9f0e18f3b1003ae76c0eed0","first_seen":"2026-09-19T07:42:43.949323Z","last_seen":"2026-09-19T08:30:16.522994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/icons/icon-180.png?v=20260801t1","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.111Z","timestamp":1789806586111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/icons/icon-180.png?v=20260801t1 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 01 Aug 2026 10:14:03 GMT\r\netag: \"6a6dc6eb-13bd\"\r\nexpires: Mon, 19 Oct 2026 07:42:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 2859\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsIZCebSgeONSvGOmMdaj068r9nrN0eMABQOSrtsKLGd2jLkR7QlaajRkvFbTY0twUnMotNrT7Q6m8U2Llajs7DaeZjau1U%2FBmJYOca4skb%2F8sZJTzYTYkjBX90Ngj64zRADbkw%3D\"}]}\r\ncf-ray: a3d7397b3f1db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5053\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5053,"size_decoded":5817,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"aa690097dde77155422c443b88243d2f","sha1":"39330a49309453c7334b975f5a4f9b113de81239","sha256":"a4e5147128f0999fc7447f8bc6eb203c1ea7362156d552a881adb68f6d2c5903","sha512":"c8ea106f0ab5771b2711fac23280de9cb93d33cd41185f1510594e0888147d9764dbc11bd6cbf9d989e6168a545d3dd51c067c8c66118efffdb905e10f6c7832","ssdeep":"96:LS70yr0YhoVASnLRsBvP3b8260BzanOO1Na0ESQxfdn/Jn1hSHeAVwS3uZGgOS4:LS7br9hoq2F03hx1anOMVETh1h2eAVwa","tlshash":"fba15d9f12608ed2ac8564fb3f9e80a6123b95f706d9538f11b5fce13d88231729417e","first_seen":"2026-09-19T07:42:43.945169Z","last_seen":"2026-09-19T08:30:16.523947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protonvpnx.com/","fqdn":"protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:29:44.602Z","timestamp":1789806584602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:45 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://www.protonvpnx.com/\r\nset-cookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90; Max-Age=86400; httponly; path=/\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TR7oqdbd0d5caD3wlSe6GCLy7Xg5PRFrW3%2FXf%2BqHOUUhz%2BzyBEltQXQ9%2BHyXlG1S6VPWaNyvQ4QULCZ%2FKzy1Pf%2BQiX7uWhUyD7fZaCT1uBW7nMnvKksLRuaGA7DN2Ik6Q%3D%3D\"}]}\r\npriority: u=0,i\r\ncf-ray: a3d73971fe2db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"server_name_session","value":"cf2a1a5a070f47fea68b0eb419d86d90","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=cf2a1a5a070f47fea68b0eb419d86d90; Max-Age=86400; httponly; path=/"}],"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:29:45.251Z","timestamp":1789806585251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 07 Sep 2026 10:47:43 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oh8WgQ9DA9m2eHnkAeUgoeFDHoDxUArF0PrhQjO4DCYtwXmKvFqlzKNMH%2FUANtFXKpBl4QQpYMIl8h3Xl0LFbxkZTfWHalMqlvg%2FKlrZ%2BdYx68CjvdG0HBwpSNkz865KrqpXngw%3D\"}]}\r\nset-cookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90; Max-Age=86400; httponly; path=/\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3d73975ee97b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"server_name_session","value":"cf2a1a5a070f47fea68b0eb419d86d90","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_name_session=cf2a1a5a070f47fea68b0eb419d86d90; Max-Age=86400; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21177,"size_decoded":7658,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1610)","md5":"add0869289b16fbbbb90d62180ea6205","sha1":"6e738c521f223084e2afc028caa431677f64ae76","sha256":"52eea51ca36b6a0d8199c736b64104dc326fe4685a83e42e75c9dee84e369c3f","sha512":"fca3c81a943dd5d84e511f0c37bcfad74f020e58a247dc8c58913d86066359385e7a21cce3ea11b9d851bcce2cb5c597c2d81b823754428ca60920df708f2d82","ssdeep":"384:ZMC2KjAiIoiQr0Ca38d1PmcvN3Eh96u/LlEZPDRrO89a9W9BX4tBjqUDSfqoSf3y:YiI+XR0LlEZPDxOsO6LFwn9EB","tlshash":"2f92e87393f0b82f126756d17327e37ea1afa60be8624488fab947d45bd6cd15803046","first_seen":"2026-09-19T07:42:43.935784Z","last_seen":"2026-09-19T08:30:16.525485Z","times_seen":2,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":7,"dns":7,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/css/editorial-20260808.css?v=20260817f2","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.007Z","timestamp":1789806586007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/css/editorial-20260808.css?v=20260817f2 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 13:29:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a830ccb-29e6\"\r\nexpires: Sat, 26 Sep 2026 07:42:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\nage: 2860\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FoUmGgPXF%2Fcxup0A1W6L2g50a0XM46CWJsKMVhA1zgdKa2xu7rDF%2BZdTACgLH74qor%2BiBnKVtAMEQsDbEP3VRzTGOq9jaZg0Wj9MPGVIWWeKM28%2B7clG3UtFgqFWf74ngCCcVv8%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3d7397a8f0db4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10726,"size_decoded":3465,"mime_type":"text/css","magic":"ASCII text","md5":"34b011567a80edfc0ef1d9a8f3b4fe59","sha1":"52686514628f44b1900a385aa5c9f130ec68d92e","sha256":"3e8e018fd2320251e681969ff816db95db01afb1bea7c9d514a42925040d5e6d","sha512":"c75daffb0f6a68db949d79753665da40b4c3e17c1fc4f14af52fa2926271b908681ef2dc763ff9187b93ea35d1d1378e92cae247c2bea37e92dd57c0d9707581","ssdeep":"192:NdE5TjqOosNrt5E38QSr3TuZc4wycUqAeCxD:oxjgs5t5MKreOaqexD","tlshash":"8122547f6250a637782a959eefc4529d7080b883e4678adcddc29b1885c71f32773638","first_seen":"2026-09-19T07:42:43.938572Z","last_seen":"2026-09-19T08:30:16.526682Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/css/editorial-20260814.css?v=20260817f2","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.009Z","timestamp":1789806586009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/css/editorial-20260814.css?v=20260817f2 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 13:29:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a830ccb-2b7f\"\r\nexpires: Sat, 26 Sep 2026 07:42:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\nage: 2860\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vy2JnN4J2B2HiZfw22BebKwV236UKKVmQCXrcbg%2FGMktCtTa9ejdkasush5WBYx5%2BYGfLzywaxGl3rqqW680annJ3pTeNp%2FsR2Xbbct1%2BurAMft2p3L05KZvFK1dU7B4OynRdJY%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3d7397a8f0eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11135,"size_decoded":3555,"mime_type":"text/css","magic":"ASCII text","md5":"2925bfc847a28eeecf9fc114ebee5ad8","sha1":"62f03304c51bacba445844320ef1063d77a624df","sha256":"be3b785f7b6a65c95c248691c1f66232293d0deffb9222fd0ec303762e7a82cf","sha512":"d89c148dec6c575d8a1b428151075a3c2a8393dfcd0bbcb9c1222cda777efe579134f473c3cce1a7cfac1cf475097d5a4b4802328bad3d1e3686f284e77c33ed","ssdeep":"192:adE5TjqOosNrt5E38QSr3TuZtac5UJf4wycUqAeCxD:Zxjgs5t5MKre6daqexD","tlshash":"b83255bf6250a637782a959eefc4529d70907883e4278adcddc25b2885c71f32773638","first_seen":"2026-09-19T07:42:43.940064Z","last_seen":"2026-09-19T08:30:16.527597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/package-download-20260907.js","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.012Z","timestamp":1789806586012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/package-download-20260907.js HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Sep 2026 10:47:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9e964f-696\"\r\nexpires: Sat, 26 Sep 2026 07:42:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\nage: 2860\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57G%2BbkStl5LMLSV18AAgSLGhoh2ZDDacPrf03VfRlCY61nmGsOaw42SemoR1DHToSK1RLOFLVufjHfvTTBHJZcbpSgOP%2FCYgz176I3d0ptt3%2BhAjdtmG92g2C00b1wFNDBkiZZo%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d7397a9f0fb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":1694,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"acb4d66e76f78b1a30ec2fb5e0ac6b2e","sha1":"e7f8fcf0bd4fe1ae82191e0d9eb9d49cc2eef24a","sha256":"fe115590649da50f7b36a90a62e6b25223a83127ebc78352c1782c8442db3607","sha512":"f55da75df8869260bf96c45293ea0eafeb62540e2c41c7f4159c9eb70ee06527e24f8887db31ba844dcb9fc9d1f6bbcdd940f214702d131288d58f0ae1602c7c","ssdeep":"","tlshash":"4131fe6f847654255633901e2bdae3ca333b10477003e60d7dad65087ff1a1561d9a9b","first_seen":"2026-09-11T19:30:51.391658Z","last_seen":"2026-09-19T08:30:16.528437Z","times_seen":4,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/images/protonvpnx-windows.avif","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.016Z","timestamp":1789806586016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/images/protonvpnx-windows.avif HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 01 Aug 2026 10:14:01 GMT\r\netag: \"6a6dc6e9-af3c\"\r\nexpires: Mon, 19 Oct 2026 07:42:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 2860\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWOlpSmTBYTU0Io7MB8rPzUPwopkweYYXK%2BPmj0po6R0WXyMRLvhUbJKVS9Y%2BNrx%2Bsxlrs30YAS9h3n8Yk3OyICe1YsSu8To7gBs%2F14OMDQQS0Poe6yVsbRlu9cSYEf6cvlVEeo%3D\"}]}\r\ncf-ray: a3d7397a9f10b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44860,"size_decoded":45627,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"78990481298c3062a82c01e432624933","sha1":"fdedb2c3fe77cbe92aebcd0ff0783b0fa2a50c50","sha256":"30fede1f902862611958734887bbaae0bb6b50cafc0bae82fc8828f1d581cdfb","sha512":"66a77c929cd64822b2d2def1aa2faad8cc3e498b08477f47e18e672b771aabac0a7bd09cecedffa8888a48a3569326126acdfab816bd7ed92553833ca766862c","ssdeep":"768:DpRFniEqislqQ5CskMvfXd5/o7QYIjwVBIRWelis7ScWmZE2TFh2DK:DZiEqt7ssnlFxYIMVBS9lis7/HFkDK","tlshash":"4c13f212a9a5b93df0398561e03fd186b2d34314d05346f23f0b96e679b41a0acf9edb","first_seen":"2026-09-19T07:42:43.943635Z","last_seen":"2026-09-19T08:30:16.529069Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/favicon.svg?v=20260801t1","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.112Z","timestamp":1789806586112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /favicon.svg?v=20260801t1 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 01 Aug 2026 10:13:59 GMT\r\npriority: u=6,i=?0\r\nexpires: Mon, 19 Oct 2026 07:42:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"6a6dc6e7-20b\"\r\nage: 2859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipbrkMgyjKFdw0uf5Ue%2FrV7psBaCISZTX6Ww6eghu5hm9qncpSpWWAWXCa6KJAzcc9icwa4JXkn7iuuSOHqiReKvg9vngec35Rsv5aR7Sc8Uil1v6FVrvVaDpm8wGP%2BZufQ29Oc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d7397b3f1eb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":1103,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3a8d4d7eaa0f5663ac05fa564e06a3c","sha1":"7d92b98dd7dd27dfe9c537a0edc06a12a21eb8eb","sha256":"93d22392b759bb4762fa17a604a0ff23b81f1ee85761bcdb02de1eb6e064f3be","sha512":"751699ac54e5a8b3c1aca3643a678d6eb559fbd999343615eadb76f5fd8c39b202551402fff2285ac4228d16638d2dd0f22c7a62e17c72f25765e8b7c348570b","ssdeep":"","tlshash":"dff00ebaf4a97cabd94fc678ac4800d5951e525514c0c3a9f0e18f3b1003ae76c0eed0","first_seen":"2026-09-19T07:42:43.949323Z","last_seen":"2026-09-19T08:30:16.522994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/css/site.css?v=20260821n1","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.003Z","timestamp":1789806586003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/css/site.css?v=20260821n1 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 02:41:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a87baf0-53a3\"\r\nexpires: Sat, 26 Sep 2026 07:42:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\nage: 2860\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dt5clUIuRUOF2tjnRSVLwIu9WQnP3WAJ%2FUTqN%2FK7hs2r6dVSeYKHL7sII7dhBvDq579XQ7OWvBNXK0k5FES3xRFR%2FnhNRY7yxjEZdFK488YJ01aHCHTizEkLBZInuZlPEqDEZJU%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3d7397a8f09b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21411,"size_decoded":6149,"mime_type":"text/css","magic":"ASCII text, with very long lines (18077)","md5":"e5177029ad531498f5429f26aa79173e","sha1":"0d6c6e64a6ad7d10a20326b5399e686c5a6fed43","sha256":"dd420ac1182cf8da4af859a409a745ba17f199f927a5e2337bc36ec4a3ac12cc","sha512":"9b8f934d580c3ae37797a11757c1470405f804f181f09b5b005a8692d36752fb699c5b4d63c0a115ce4c8733810d9e5f49104a2de95102a2c5f04323301f6aae","ssdeep":"192:cW2Zy2I06BQs+qxpGTnq04cC5x2DAk/bsg+Sp7DkAnegYuW8M5oW3G+GwM/vgoq:32c2RuQ7gpGTnN4d5IDAkGE73eyGZUu","tlshash":"03a27236a120323db47be9a1e9d1668ff0209413c92703e9fc82e265c9db1f75a7165e","first_seen":"2026-09-19T07:42:43.946663Z","last_seen":"2026-09-19T08:30:16.529834Z","times_seen":2,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/js/site.js","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.005Z","timestamp":1789806586005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/js/site.js HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 01 Aug 2026 10:13:59 GMT\r\npriority: u=3,i=?0\r\nexpires: Sat, 26 Sep 2026 07:42:05 GMT\r\ncache-control: public, max-age=604800\r\netag: W/\"6a6dc6e7-27b\"\r\nage: 2860\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zeVDGv1%2BphLBFjhoCUp%2BQMMFDfxR3AZblJbgqb47RqaPm0KoSH5%2BxDgGJJYSwh3s8gQH%2F2f0aXfXzgbnx%2FsdWcWR8YddX9Qh75DtArvMdoen5NjsF%2FmRFjuRm%2F1365E9Oqp77o%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d7397a8f0ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":1098,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (334)","md5":"8c3bc6ad918828ef896441811ca7ff95","sha1":"b665be595f319a766d80cbf59a638c1bfa5f6d8e","sha256":"2d42676343b43f49f474b46f2fae38af78ee2559982744c869f936ba477bdf64","sha512":"ca0bd83d001f0ef6c6f44994a506750e0115336b1635e328422c07f3dcdc3bea088fb54538c98695102c173271fc2a7b52f7b9c21cb474f7c39eb9b17eb644f1","ssdeep":"","tlshash":"64f07d3be20004774ca645d6ead556f4beb000aab5036865a67ccdc5205ec432c34cf8","first_seen":"2026-09-19T07:42:43.937306Z","last_seen":"2026-09-19T08:30:16.530651Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.protonvpnx.com/assets/css/editorial-20260806.css?v=20260817f2","fqdn":"www.protonvpnx.com","domain":"protonvpnx.com","tld":"com"},"ip":{"addr":"172.67.195.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.protonvpnx.com/","date":"2026-09-19T08:29:46.006Z","timestamp":1789806586006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protonvpnx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Aug 2026 03:57:32 GMT","end":"Fri, 30 Oct 2026 04:56:15 GMT"},"fingerprint":{"sha1":"AB:57:FB:F1:D9:75:DA:E8:B1:1B:B8:C3:BB:DA:DF:83:4D:BA:A1:E8","sha256":"C4:CE:3E:5B:67:C7:33:09:65:29:76:2F:83:E3:9A:6D:DD:B1:36:3F:11:A0:E1:B3:13:7E:12:A4:65:1C:6C:38"}}},"request":{"raw":"GET /assets/css/editorial-20260806.css?v=20260817f2 HTTP/1.1\r\nHost: www.protonvpnx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.protonvpnx.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=cf2a1a5a070f47fea68b0eb419d86d90\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 08:29:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Aug 2026 13:29:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a830ccb-2add\"\r\nexpires: Sat, 26 Sep 2026 07:42:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-encoding: gzip\r\nage: 2860\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nh%2B9cJ5gCgEt7r8xqORHKZU44Oh23qMwyuKV%2BSSKfbgmqnAr368fw1%2FlXH7yHUq6mH3FdpGUERfAJgg1q62T5wJXHEx0Ygd6RDGpIoRZ%2B%2FW7XBwQAiqkGDp0N2yt6%2BYPTJFL0p8%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3d7397a8f0bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10973,"size_decoded":3527,"mime_type":"text/css","magic":"ASCII text","md5":"3721b41e0911cdb4f9d89c2a32800947","sha1":"ab980fdeea6ef645b173c117ae97bcd4fb3c0b8c","sha256":"e02f01b65d96daccf77b4ed96648512ddd87159d09351119e1789f1b5a051e10","sha512":"4abd04c2b37178bf1693640b8881252d0919d37a702dbb6c03bc51647e561150cdd79c0f4acd03b15bb45ad29b7a4a1bca851753addfeed275a1d401e9a8b6a0","ssdeep":"192:bdE5T9qLosNrh5E38QSrpTuZc4wOcUqAeCcKD:Sx9xs5h5MKrYOGqePD","tlshash":"1632547f6250a637782a959eefc4529d70907883e4638adcddc15b1885c71f32773638","first_seen":"2026-09-19T07:42:43.948003Z","last_seen":"2026-09-19T08:30:16.531557Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"www.protonvpnx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}