{"report_id":"026ed7b7-cc2b-4991-af3f-56c92a54923c","version":6,"status":"done","tags":[],"date":"2025-10-15T11:29:43Z","url":{"schema":"http","addr":"poc-tinybase-cloudflare-client.pages.dev/","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"title":"A TinyBase App"},"submit":{"url":{"schema":"http","addr":"poc-tinybase-cloudflare-client.pages.dev/","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-19T11:29:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-15T11:29:20Z","timestamp":1760527760,"ip_dst":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":45078,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-15T11:29:20.835276+0000\",\"flow_id\":1577294620566361,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45078,\"dest_ip\":\"172.66.47.88\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"poc-tinybase-cloudflare-client.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":942,\"bytes_toclient\":3319,\"start\":\"2025-10-15T11:29:20.828249+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-15T11:29:22Z","timestamp":1760527762,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":35260,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-10-15T11:29:22.100047+0000\",\"flow_id\":865107438627245,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35260,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"poc-tinybase-cloudflare-server.jbmoelker.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-15T11:29:22.092589+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-15T11:29:22Z","timestamp":1760527762,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":35266,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-10-15T11:29:22.170686+0000\",\"flow_id\":1248154096927358,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35266,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"poc-tinybase-cloudflare-server.jbmoelker.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-15T11:29:22.164478+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"poc-tinybase-cloudflare-server.jbmoelker.workers.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2025-10-15T11:28:47.240868Z","last_seen":"2025-10-15T11:28:47.240868Z","alert_count":0,"request_count":1,"received_data":898,"sent_data":632,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"poc-tinybase-cloudflare-client.pages.dev","ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-15T11:28:47.239579Z","last_seen":"2025-10-15T11:28:47.239579Z","alert_count":9,"request_count":9,"received_data":550119,"sent_data":4570,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":5720,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":2,"received_data":98714,"sent_data":1160,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-15T11:29:20Z","timestamp":1760527760,"ip_dst":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":45078,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-15T11:29:20.835276+0000\",\"flow_id\":1577294620566361,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45078,\"dest_ip\":\"172.66.47.88\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"poc-tinybase-cloudflare-client.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":942,\"bytes_toclient\":3319,\"start\":\"2025-10-15T11:29:20.828249+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-15T11:29:22Z","timestamp":1760527762,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":35260,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-10-15T11:29:22.100047+0000\",\"flow_id\":865107438627245,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35260,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"poc-tinybase-cloudflare-server.jbmoelker.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-15T11:29:22.092589+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-15T11:29:22Z","timestamp":1760527762,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":35266,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-10-15T11:29:22.170686+0000\",\"flow_id\":1248154096927358,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35266,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"poc-tinybase-cloudflare-server.jbmoelker.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-10-15T11:29:22.164478+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/assets/index-lJ3Shfpr.js","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8de705358b21b22861d26d46b9ab93f","sha1":"0a36daa78af03208c1b7c8258f7e986b69bd88f1","sha256":"3112c1d99dd728eafc9e0a069a90981c472bdac7b029b7bd50065532dd496032","sha512":"c877355479ef9cf609e21ef64892fb3ba960608f7320eb46443c5e78d1a0a956006e755f54d056ca954ddd9e93839e6a38ff4d39e020e0477990d05d2aa5414b","ssdeep":"6144:hoWdapiDKHsjS3lyvVlGxa/KGNWBmM9UFXqcBUJXG:WM0OyEvzGxQjsUFXqc+G","tlshash":"a1442ce831bdba7626b256e5007f111771383827244d88b0e125ee9a77b844a60f7ffd","size":269146,"data":"","first_seen":"2025-10-15T11:28:49.557712Z","last_seen":"2025-10-15T11:29:44.356506Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/assets/index-lJ3Shfpr.js","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8de705358b21b22861d26d46b9ab93f","sha1":"0a36daa78af03208c1b7c8258f7e986b69bd88f1","sha256":"3112c1d99dd728eafc9e0a069a90981c472bdac7b029b7bd50065532dd496032","sha512":"c877355479ef9cf609e21ef64892fb3ba960608f7320eb46443c5e78d1a0a956006e755f54d056ca954ddd9e93839e6a38ff4d39e020e0477990d05d2aa5414b","ssdeep":"6144:hoWdapiDKHsjS3lyvVlGxa/KGNWBmM9UFXqcBUJXG:WM0OyEvzGxQjsUFXqc+G","tlshash":"a1442ce831bdba7626b256e5007f111771383827244d88b0e125ee9a77b844a60f7ffd","size":269146,"data":"","first_seen":"2025-10-15T11:28:49.557712Z","last_seen":"2025-10-15T11:29:44.356506Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/assets/index-DO37vga3.css","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/","date":"2025-10-15T11:29:21.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /assets/index-DO37vga3.css HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fc2j34lwzE1GYMGnGcYbo6VOsAKB1240ezez754uVn7fNRRrRZgywJZhdEKB2ad724O5HnDpls%2FYUcxjWOlObcisCtnGGScgsQxwMpPW5TZOzT3QVoSBHt4U35beZpbCGT5i1IuIiYM%3D\"}]}\r\netag: W/\"0664db02e020dada6d2e416f933ac156\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa6c7a85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1293)","md5":"f971738fcb4c6b3a485a163c790116d2","sha1":"4ad4b735dfa653cd7e9dee9c8240d98df8de2908","sha256":"f37d54503b807f6eaf617dd336902e63b92e736e064efb0fc3d5cfa65c7d40c7","sha512":"dd956d66a078d354d70291c843540b16b4d9bdce207a77d6a5a47835599237ab948a274ef266b22f957bb21c9e63c7d0bd7442ad6b83cdd1909c73aac565ed66","ssdeep":"","tlshash":"f121317677a0b208fa76c0b67291accc31040a18d1579374b4b35ce5c4c52b36b74f0a","first_seen":"2025-10-15T11:28:49.545984Z","last_seen":"2025-10-15T11:29:44.335475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-15T11:29:21.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /1TwGVERctNGQ9vRX HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=1,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKDFMd%2FXfRs%2F7Uo6vHkq3vx9dYIoyYCvxlaSvRu4VaMyqNKIXCJ%2BNnrYYPkn6z005K2Nn%2Fj8A15ix6q%2BPztWt%2BkhhVp72rMn9eHlf7maWA21H81eFNMCEj1Yt2GQZLpN9Bw0QKDF9%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"62e7f4b6046e98a9022c30133002f22e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa6f5cf75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d9fcf0978ffdf9148b150e8243c0194","sha1":"df1baafc13b35c70759746248e1e5c5bf18801e8","sha256":"626a308d74c2efeafde6665588cb94620268304f1c0efcaef14cef191f045872","sha512":"5bf9db96bec108363adc3ba7269550ae8abf58893cdd5a8dc8a092eb25812ec0ba5b2f9d8056e44475b3aa4b4a40baca90e6aaea92704bcbf403812a4070a27f","ssdeep":"","tlshash":"a701f45614d0c815131087906dc0f829dd43929b4b49ae5875fb90fd8f947d18acf5ed","first_seen":"2025-10-15T11:28:49.533958Z","last_seen":"2025-10-15T11:29:44.339993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:21.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Oct 2025 11:29:21 GMT\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"145e620dfb333301a28718da678ff02c","sha1":"4efab5c781a7b52ac60dcee1ac3d6ab98888ba86","sha256":"f7859a3f21257f2351aa165b001bdd4ecfa13169444749b0ddbf004d78722043","sha512":"1badf86f52c974e9f494569bd7a8196d1516ddd0685a7d25e0d4217e5fce797b7a5bd88e772a8b62fdb4e65da8c44085e4342c0368c187fc57cd2da4a021998a","ssdeep":"96:aOEaNqOEaXFZHOEamOEaO3vOEaBOEaBJc+uTOEaNcNDOwhaNqOwhaXFZHOwhamOE:9NNIxO34OxDfNx0NO3kCxHx","tlshash":"a6a18b92002ba400ab971dc233cf7f3aaece10856085d1b95ffd0dca5cead66436875d","first_seen":"2025-10-15T11:28:49.552356Z","last_seen":"2026-07-24T11:14:41.342964Z","times_seen":60,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:21.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://poc-tinybase-cloudflare-client.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:22:44 GMT\r\nexpires: Thu, 08 Oct 2026 17:22:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583597\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T16:30:04.78074Z","times_seen":251909,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/favicon.svg","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:22.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:22.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://poc-tinybase-cloudflare-client.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:22:44 GMT\r\nexpires: Thu, 08 Oct 2026 17:22:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 583598\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-03T16:30:04.78074Z","times_seen":251909,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/assets/index-DO37vga3.css","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:21.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /assets/index-DO37vga3.css HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ak8vhq10hbsQyCePm7YhBNaJw2mcn22BxZfqT1CIKdOHyiMls5IQyLGp9C3p9OW0BVPdicsSefikNtSg9V%2Fw%2BnIbod0ajWjQDMGorSm9DiulF8%2Bn01PCP7w06ANESfoJaBX0il9lmik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0664db02e020dada6d2e416f933ac156\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa6fbe765a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1293)","md5":"f971738fcb4c6b3a485a163c790116d2","sha1":"4ad4b735dfa653cd7e9dee9c8240d98df8de2908","sha256":"f37d54503b807f6eaf617dd336902e63b92e736e064efb0fc3d5cfa65c7d40c7","sha512":"dd956d66a078d354d70291c843540b16b4d9bdce207a77d6a5a47835599237ab948a274ef266b22f957bb21c9e63c7d0bd7442ad6b83cdd1909c73aac565ed66","ssdeep":"","tlshash":"f121317677a0b208fa76c0b67291accc31040a18d1579374b4b35ce5c4c52b36b74f0a","first_seen":"2025-10-15T11:28:49.545984Z","last_seen":"2025-10-15T11:29:44.335475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/assets/index-lJ3Shfpr.js","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/","date":"2025-10-15T11:29:21.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /assets/index-lJ3Shfpr.js HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2wclQNdlCys6g8%2BypMNxDantccw1BpBK5NR1VIY2mgu%2BpkqQ%2F2ScNqQ5hzRmTDJldja4tF3olM334WUTJGxIqvA%2BRYnxbw%2Fzc0ZN0F%2BBRONp6j%2BXr%2BUQ%2B7wu9tIbMKrREzPF%2BIaZEs%3D\"}]}\r\netag: W/\"8e7a0ce26e4eae7f70a560a1d49fb557\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa6c7a80783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269146,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35461)","md5":"d8de705358b21b22861d26d46b9ab93f","sha1":"0a36daa78af03208c1b7c8258f7e986b69bd88f1","sha256":"3112c1d99dd728eafc9e0a069a90981c472bdac7b029b7bd50065532dd496032","sha512":"c877355479ef9cf609e21ef64892fb3ba960608f7320eb46443c5e78d1a0a956006e755f54d056ca954ddd9e93839e6a38ff4d39e020e0477990d05d2aa5414b","ssdeep":"6144:hoWdapiDKHsjS3lyvVlGxa/KGNWBmM9UFXqcBUJXG:WM0OyEvzGxQjsUFXqc+G","tlshash":"a1442ce831bdba7626b256e5007f111771383827244d88b0e125ee9a77b844a60f7ffd","first_seen":"2025-10-15T11:28:49.557712Z","last_seen":"2025-10-15T11:29:44.356506Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/assets/index-lJ3Shfpr.js","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:21.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /assets/index-lJ3Shfpr.js HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLvgHT4wcMAbx6WBify4hXuF4zH%2FtuTYgXIDRNR61tFIislS8j2X1zlpbNjy3HFp8nvJF9QFQ5wt7ew9NEAVRy9uB51FNCd4f%2B8vjj9DqghEtPwYK%2By3SdeeYIDffrBt1ILVgDEsyy4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8e7a0ce26e4eae7f70a560a1d49fb557\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa6fbe6e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269146,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35461)","md5":"d8de705358b21b22861d26d46b9ab93f","sha1":"0a36daa78af03208c1b7c8258f7e986b69bd88f1","sha256":"3112c1d99dd728eafc9e0a069a90981c472bdac7b029b7bd50065532dd496032","sha512":"c877355479ef9cf609e21ef64892fb3ba960608f7320eb46443c5e78d1a0a956006e755f54d056ca954ddd9e93839e6a38ff4d39e020e0477990d05d2aa5414b","ssdeep":"6144:hoWdapiDKHsjS3lyvVlGxa/KGNWBmM9UFXqcBUJXG:WM0OyEvzGxQjsUFXqc+G","tlshash":"a1442ce831bdba7626b256e5007f111771383827244d88b0e125ee9a77b844a60f7ffd","first_seen":"2025-10-15T11:28:49.557712Z","last_seen":"2025-10-15T11:29:44.356506Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/favicon.svg","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:21.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqcdEPLNZ9aLvKJ6vPv8rBbG6lSq%2B0UC%2BJFBWbTqgsiT4nQEpbQtN7O3eqdlyWECHsfpSKP7xwfpLVwnftKPJq1qwMvSl4StE9RiMhi3n7xZWJB68T7B3Dc3S0V2y7TQO0mUGBmQb2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0397a8c592803aabbc64597590aa9b23\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa7079195a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce03f398120def39db8b92de9c0933af","sha1":"92c13e984c90049a318096edcb9546d7098abbc7","sha256":"5982b2a4efdfff91fbe3f39178fc59fd81aa921bbf9afe0b4392b2fb1b122daa","sha512":"104773c2ba50bdfb2e32a76ced9fa487381f9e901515a23f6d29d01c1dfde8e8ebe589cf8f5fe5cc4afe1842c5922097c5c4805d908e22fcc68ecf52eac68f56","ssdeep":"","tlshash":"02f04484e67c7ab0e48a87407eddc4d90245dcfb324e00a08bedd9b21e1256dde83dc4","first_seen":"2025-10-15T11:28:49.564753Z","last_seen":"2025-10-15T11:29:44.359689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"poc-tinybase-cloudflare-server.jbmoelker.workers.dev/1TwGVERctNGQ9vRX","fqdn":"poc-tinybase-cloudflare-server.jbmoelker.workers.dev","domain":"jbmoelker.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:22.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jbmoelker.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 16:11:54 GMT","end":"Thu, 01 Jan 2026 17:10:25 GMT"},"fingerprint":{"sha1":"E7:37:07:31:7E:5C:AA:EB:C2:75:82:A9:C4:91:9E:D0:A9:B2:2B:9F","sha256":"3B:AD:E8:D3:13:37:BF:AA:E0:EC:1A:10:AF:6A:2F:CA:68:F8:0E:76:5B:28:F9:6A:60:BE:25:F4:76:3B:2C:32"}}},"request":{"raw":"GET /1TwGVERctNGQ9vRX HTTP/1.1\r\nHost: poc-tinybase-cloudflare-server.jbmoelker.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://poc-tinybase-cloudflare-client.pages.dev\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7vuWcU+iKwianM9tBdgjGg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 15 Oct 2025 11:29:22 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QkXagsXcXMZTfRD86ZAD8Dof9Cg=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=33lZGXo%2BvMkLIgoXpr83jrByx3VJNl5FzSG1Kvd5jDYUBacp3u8oU6icITm8hZO8Gwcun0v26H64LsUMWCmLbpvZB4T2VDISB8zUwjSEPORHdcmGi01DIWBcVpujel1bIBCwZsMRt6p60fh%2FTVuXCRBuQocqe453cgx4zXk2ctWiKw3SYg%2BC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 98eefa719a5f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=456\u0026min_rtt=432\u0026rtt_var=165\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2850\u0026recv_bytes=1235\u0026delivery_rate=5362962\u0026cwnd=251\u0026unsent_bytes=0\u0026cid=2d4a9f9f5bd6ae96\u0026ts=650\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":0,"dns":72,"connect":73,"send":0,"wait":639,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-15T11:29:20.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ab4zGfML5Gy0CZNsIIscD1SpOvoilwLw83ag2smiUjPQn%2BMHc8FM8T8S1RhWgYr%2FArVpBIalAIRuTWqWddLaHn31dUPs2dND57uWouwqHC7WQCgC27CU9AAUX32blKRLT8q%2B%2Bf%2FIwDs%3D\"}]}\r\netag: W/\"62e7f4b6046e98a9022c30133002f22e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa6b3f85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d9fcf0978ffdf9148b150e8243c0194","sha1":"df1baafc13b35c70759746248e1e5c5bf18801e8","sha256":"626a308d74c2efeafde6665588cb94620268304f1c0efcaef14cef191f045872","sha512":"5bf9db96bec108363adc3ba7269550ae8abf58893cdd5a8dc8a092eb25812ec0ba5b2f9d8056e44475b3aa4b4a40baca90e6aaea92704bcbf403812a4070a27f","ssdeep":"","tlshash":"a701f45614d0c815131087906dc0f829dd43929b4b49ae5875fb90fd8f947d18acf5ed","first_seen":"2025-10-15T11:28:49.533958Z","last_seen":"2025-10-15T11:29:44.339993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":332,"dns":1,"connect":1,"send":0,"wait":33,"receive":0,"ssl":328},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"poc-tinybase-cloudflare-client.pages.dev/favicon.svg","fqdn":"poc-tinybase-cloudflare-client.pages.dev","domain":"poc-tinybase-cloudflare-client.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX","date":"2025-10-15T11:29:22.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poc-tinybase-cloudflare-client.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 19:51:15 GMT","end":"Mon, 05 Jan 2026 20:49:55 GMT"},"fingerprint":{"sha1":"62:F9:1F:7F:BF:EA:AC:44:7C:E1:86:37:C9:6F:45:D1:84:99:89:FA","sha256":"06:A4:EA:D8:2D:D7:D4:22:AC:E0:35:D8:7D:D0:3E:0F:6D:E3:84:B8:7D:8E:20:0F:19:F9:5B:9D:D8:2A:E1:5D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: poc-tinybase-cloudflare-client.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://poc-tinybase-cloudflare-client.pages.dev/1TwGVERctNGQ9vRX\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 15 Oct 2025 11:29:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Bzc23aYGMLGt4xcp4QIEQTwPIJ%2BRkWIBIQza2usmxP4jxDOOhB4OZIRR1TXQg2%2Bnmfp3Ykcemrmze3t4izRPm7Cbku8xq3qyNv3Yj9Vya5X7e838bB%2F07kLdVsK2tJs6MBHKjkmOwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0397a8c592803aabbc64597590aa9b23\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98eefa715fb8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce03f398120def39db8b92de9c0933af","sha1":"92c13e984c90049a318096edcb9546d7098abbc7","sha256":"5982b2a4efdfff91fbe3f39178fc59fd81aa921bbf9afe0b4392b2fb1b122daa","sha512":"104773c2ba50bdfb2e32a76ced9fa487381f9e901515a23f6d29d01c1dfde8e8ebe589cf8f5fe5cc4afe1842c5922097c5c4805d908e22fcc68ecf52eac68f56","ssdeep":"","tlshash":"02f04484e67c7ab0e48a87407eddc4d90245dcfb324e00a08bedd9b21e1256dde83dc4","first_seen":"2025-10-15T11:28:49.564753Z","last_seen":"2025-10-15T11:29:44.359689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"poc-tinybase-cloudflare-client.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}