{"report_id":"08fa0ff3-2f40-4a95-bd8a-69b9a127dd6e","version":0,"status":"done","tags":[],"date":"2026-09-16T19:29:41Z","url":{"schema":"http","addr":"ristek.link/","fqdn":"ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.ristek.link/","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"title":"Ristek.link","dom":{"size":1618946,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26246)","md5":"f5c4849a47baffc5b6dfc480d74366c9","sha1":"2b09274b1378f9cf46b4be3195fef6dacbff03ee","sha256":"163da9ae10c874f3b95c6f1904901861f31784f0509ac3755b15de0a96d252b4","sha512":"5464519b7cd8cfea554b1f6eeb2e6f3cffc614e181542b855f2d47ad44cdaa03d317f67f8725e0176845a26d64516614acb1f0466553651da0a587c4df64a822","ssdeep":"24576:5+0PMgUZRLqjMjS/glwQRRraLsbI5HbsuFwXlD1Zjc0SNl7s+Gnk0V:5+eMqe0LsmSuI+YV","tlshash":"e775233919217d7b8537c37470ba6f0d7e920b17d812e8debad51292e2cefc14ca6861","dom_hash":"domhash03ab3541444195f22ef83b467ba663e6","first_seen":"2026-09-16T19:29:52.193964Z","last_seen":"2026-09-16T19:29:52.193964Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ristek.link/","fqdn":"ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T19:29:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.ristek.link","ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-03-29","domain_rank":7061291,"first_seen":"2021-03-29T10:59:56Z","last_seen":"2026-09-16T18:49:12.06342Z","alert_count":180,"request_count":45,"received_data":4824225,"sent_data":33026,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-09-14T09:44:49.044431Z","alert_count":0,"request_count":1,"received_data":272803,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ristek.link","ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-03-29","domain_rank":2984428,"first_seen":"2021-03-29T10:48:11Z","last_seen":"2026-09-16T18:49:12.062807Z","alert_count":4,"request_count":1,"received_data":737,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/main-bacde8d9f60e224d.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"104e41cf428e1b0eef057b1ce9572865","sha1":"22e7110b5ff887219e5ed2bd713a13b109bf3d56","sha256":"b27bde70a1d8081a8aa6ba3e71c025f113df037f8d0e9bdd707282e70879e4ed","sha512":"69cdc23b500e5b041e6e4791a3ea2fdae76e922bb31e3feda88eec8b13f997723f661fc40e934c1dd8843ff0a1d47b1afe60226804dcf8a3eb974fcef81ba2c5","ssdeep":"1536:Yu35DFnsy4+VBrZBVTYAnPPEBpJg3uLC3akoMobW:5Rns2VFPPEBpS3ADzS","tlshash":"fdc318d871e2f4a206d361b5403f210af37a5d2aa09de440e36adcd57cb499f9233f69","size":119628,"data":"","first_seen":"2026-06-27T08:18:19.234376Z","last_seen":"2026-09-16T19:29:52.200375Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/ee8b1517-b74222eca28dfa3b.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76b8758630d772d94618d15e41563180","sha1":"a36f190f58920e25308ad1a61d28217da9a0b0a4","sha256":"68991dde04bfe391977e35d5b5007df6cf3419f5d87028fb5f2eb847add2d3a0","sha512":"58b5f4766bbf6106e58b3e1a71599fe4d654b73c046619e0f06288d6cd764490f4d998f6a8a90124ac59ad0280a5497a9359d673a11588e618792e0d590330ad","ssdeep":"3072:hdQFh/G2eAD2sY7d/vDSgMB0TplcedRlZAsSA+Gw0V7H2VcEjxsRH6WIE5:hdQFh/G2eAD2s8d/bSZB0TplcedRlZAm","tlshash":"e0c3f7d63342b02282d255da543a0506e33676483647c8acf6bc5ddf6c6a98b71fbf38","size":128135,"data":"","first_seen":"2026-09-16T18:49:14.699912Z","last_seen":"2026-09-16T19:29:52.269657Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/I_fY_kqwpcLpGeozTlcUR/_buildManifest.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"512854f04cbf291cc25caf05c260c6f0","sha1":"a5144f9fb9207ec095cd76d0f5460791a4fc35ba","sha256":"a8a7d01afd2f0649bed8f34b863c938646868433f190f0d1aceca70831c127d7","sha512":"3ecfa89984c2e4b93edaf6b284239859d359f5d7c6ba680b8692fc80a7747aa3fc50f02f2bc77e43d95bc712935c14047acb97ae23a803af04ee8e08fbcb21c4","ssdeep":"","tlshash":"ac419d474854f4110ef0cccd382b3753ca80e933a63406a9d7bc5e6845956b79b9d826","size":2274,"data":"","first_seen":"2026-06-27T08:18:19.221781Z","last_seen":"2026-09-16T19:29:52.233432Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/I_fY_kqwpcLpGeozTlcUR/_middlewareManifest.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a36926d6826e83fbe9e601367cd6dd8","sha1":"c3b120282b4af7868c41bc2cb82fd29f1197ac8a","sha256":"d4d5e89c935c7de12726b28fc2e6b6af5a3464425e8b0ff6cefffffbb827089b","sha512":"9b0bb5738b2a56c992a40f8f94f98e5cd36dc840bf34c529ae60acd00a36768e895c659f9d8497411d34120d3fa9f78417bfce6c356c3e2d716218a4ff244f71","ssdeep":"","tlshash":"8cb092a8c82ee82cc8238cda87726342aff05a8a918fc4370190305a813028f2808c00","size":113,"data":"","first_seen":"2025-09-21T03:44:33.190282Z","last_seen":"2026-09-16T19:29:52.22396Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/framework-ebc429d7da2ee2be.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f464ec7a9ca91e0955a2603ee844277b","sha1":"743584d3d46b443ee329423d7152fcb8f6dc75a2","sha256":"c1e29e3c6f65587bc7db21c40aa98a31a4c562b0d9ccce1f21236149c8c7db1e","sha512":"b9036ee757e53b485f91e306363990e36676921d6a037b239ceae70f76a8a375653c047a3b97874d6fc189bca3f43a43d35b3af6e780d1d344b44a2f3607fad7","ssdeep":"1536:0vlesNeZ3jR4o2RQ/hmXz4fwKYhOIAMiUqI8ix+vQm1dqEeQNR:0aJmvKgiUB8ix6NR","tlshash":"28d317e83992f5516ab312a700ef1807733d5a1b280c4990a215fd9eb5f846fb17becd","size":141018,"data":"","first_seen":"2026-06-27T08:18:19.237535Z","last_seen":"2026-09-16T19:29:52.243727Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/pages/_app-869c83ff3b6ab97e.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd469b734eb6f2b3f1f85b31c4f2837a","sha1":"8844b28882bcc597ef81249d90575fd738f4a10e","sha256":"6531228f0c3a2a10800f06d16a429a39fc4237fbcc775f64eb7b317f09b51d4b","sha512":"b54b60c0476ba5ed0456e81da0da1be3d25a9b38d5afab34e1fa4796c29eb2a253eb48f866412a4a400a2749f59aaa5cad5ac8700286dbeffaccc726def47e9b","ssdeep":"49152:OORIAXftrzlLqLltJ/72BQqe0LsMI+CSvyO:+4ftrzlLq5LG","tlshash":"cdc5d0e9b295b03143d361b8507f110af73b1a5a640d80a8f369d8ea3c7994e9237f7d","size":2670827,"data":"","first_seen":"2026-06-27T08:18:19.249449Z","last_seen":"2026-09-16T19:29:52.279354Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/bd1a647f-f7a2dd3a1afcce46.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53e9ad371d102c10e65524acd593431","sha1":"e58d788f2c51a21927c5701605d1d08686355e3e","sha256":"12bd2144bedb82e5aa1db624db2f30036bedb43ff30395cdd3686766fd02de3b","sha512":"2da89b86d05d490502b616f79dd5803093fba5e18d26829cdf61619ad269f8d181552a7d4125e2bf42acfa1984a09e4c044620613657ab7cb2988f184b6e3bec","ssdeep":"1536:2tMCtkVdbzVAoINm+BNlCMRYWCqpNNNHRxuS:2tq2mI9JsS","tlshash":"2ca3b6c8f791b0219397a075c17f061ab33b7998644980a8b277e4c77c7829d9227f7e","size":104119,"data":"","first_seen":"2026-09-16T18:49:14.643691Z","last_seen":"2026-09-16T19:29:52.215628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/981-636f8e3cb286bf15.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02f0b698afc110530c3ecbcb4e5f4839","sha1":"78d7fd1f263ad7b8d61a223ff0102fa16010f845","sha256":"d6fd0c49c03c22585eff0aff0376bbf43f30fa93a69f6394631afeef00aa82f1","sha512":"866067683634c4b84ac02c035e82fc5f487d3e48c9c74082d02c7e6ac12f5cd7aeb76623436971e2f9d851ffa7ebb8875033bfd9a6bb0aeb7b5eccd3e3980401","ssdeep":"768:20BLfls59CIL7FuaVie5mP1DBQCTgU+hhzLZk3sm8Jw8+2LUW5KC:rLfl4pZkrtgfhzLZk3sm8e72LUWMC","tlshash":"62d2a4ccf586beacb51714a8792f900db23f2e80cd0d8921f53ea49526690c9b657fc9","size":30954,"data":"","first_seen":"2026-09-16T18:49:14.730471Z","last_seen":"2026-09-16T19:29:52.203817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/pages/index-4587a20e67567815.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc6057908eddfa3bd67e7939c44ae842","sha1":"f1ec9a2b0322460ce9dcc3caea7eceec1e60b0f2","sha256":"ed098cccf1024aa662fe23c0b6fdb25e70e8e76b2a0bdbbe4516d9035425e851","sha512":"377db68cf1e866b29ad77b8380796316ba7248aa4bc0680116b367d5973f2ea95cbe3d042bf071bf02ddee4a404819afe17e004a18318968f102fc5c10967979","ssdeep":"768:wA8s/uun+n+U5JU5J+++bzAl8p0aOPRSYdL/CllTT99jkjyK67wqJruGrCIQ2BHb:j8hclXSa/SnkqJrhWx06+hEo6X8","tlshash":"aa2309d97699bad8f51757bc40afa00db23f3aa4e51e8864b56cb814380f4c4b60bfc5","size":48485,"data":"","first_seen":"2026-09-16T18:49:14.64894Z","last_seen":"2026-09-16T19:29:52.266528Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0454876c4de2573f3d0273802d006a7","sha1":"b3919f2282eb47e186c5b0ef80c85759e89dd473","sha256":"de7f9a600bc6717a061480161d0c3ec8f80510e1f4ad5a70ffa7e3e70835b6d0","sha512":"2e623aa9ed1e454d04ccce80497ba0473c4ddbe99b3aa5002fcbe415d6346e311f856190219b7c28a4fe316df4d678a0a24fc0274e196321851adf36530b9883","ssdeep":"384:3XA1AKx8Bt/EqrTTveWSC4MAJDJT3SzhjnRaIsJXficmuFL/5lOvdZuWcMHCGu3:nzK3uTTvm/53S1jnaJXficTLxlrWJo","tlshash":"7192b7c93cd7f55e1b92346b106774dbb53fec98505c8884c52086e8b6a83fd81fae29","size":20850,"data":"","first_seen":"2026-09-16T19:25:08.21049Z","last_seen":"2026-09-16T19:29:52.257178Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e9e499a78b2f6038a5fb969a9b410b6","sha1":"231c873d126bbdeed597f6d8dff84780a9004baa","sha256":"aff6a0086039e73a61ff914edbd6dac14d94494cd4ba570342f032ee7c2fbf70","sha512":"b13b2a558b9f6cfc30963ca2d5048f5978441b449c7bbe79ac96673f30ecc5a0ea96ab887f492a424ab4c9c0dfab4ec9e4987256846f87bfd1d418af3a05e9c6","ssdeep":"6144:WTd+37hxy5esIJFTS/0o5Sfwnkc+8MAaCna90EkU:WTwssQ/0o5isHdMAaCna90BU","tlshash":"b8444adcb6e270359212f8b5c43f410bb076a679f4498cacba94c6f5acb0d890167f79","size":271703,"data":"","first_seen":"2026-09-16T13:40:13.708644Z","last_seen":"2026-09-16T22:11:24.884571Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/webpack-dc70ca3f65676011.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92342bee57dc3f153b2faf6701bdda9f","sha1":"1aaa14eba382f5f56c4bc23b0f7ddc8586eadf46","sha256":"648fe22394a1343e7348f48fadbe9cf3cbd3c611405ca34d9d2bc73f852b59cd","sha512":"d38db9a992a4d3e04cdfc05fad17836eefd3580ba17eff2bca7841e50d36154786ed3de4a905aff128a9b743f81c551b8ca6bc2d949dc7d450058c46b102ab87","ssdeep":"96:25lOU4E5qZjqDOaWzm+IVW+kVa6+sdivFLcP6pZx38:25F52aqIwvcediNLcyLx38","tlshash":"4291c4da7681f4b51ad374a0103fd05aba7b2573541ee8a0e70ae8f53c38d898522f95","size":4244,"data":"","first_seen":"2026-06-27T08:18:19.220647Z","last_seen":"2026-09-16T19:29:52.274894Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/975-f1e97d632d6af561.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf0d5a2e785fff901d80e1dbe7a27189","sha1":"36c1d1af73a3df331d319534c0215703cc4f9088","sha256":"1e76a7e618af66f7ed7080f4754f013d5df12ca01da76934524dac2260f20dbf","sha512":"c41128db9780e4cd2ac41296ecdf661ad435c0f22831633673337185af9b480f12bc36d833111fcbbc443bf6234633de82a1ea69aff50d2e9dc5afca8aa403a1","ssdeep":"768:Hgw67nRBdO9jYE8oZCEvccdoefdP/9JC2tt9KuwubY3PZzR:HZj9HHC2ttjY3PZzR","tlshash":"45d21a1a3093a47c5aff93e2d03ddf5da2391512a00d46a8f2ab4e329f45b59c15ef0d","size":30750,"data":"","first_seen":"2026-09-16T18:49:14.64707Z","last_seen":"2026-09-16T19:29:52.27579Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/269-cae8a9005e699d52.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"131f3da770460c0828574c6df15ed0ec","sha1":"643d41e41f2b6fc1b562c2727aa7b40204292cb9","sha256":"04751e4201451b4f8aebd48d19d7488120c312f879ba9f2d55dd500ccebfa09b","sha512":"f8aae07e1fd3b830aba9ba394e8906f0d0e51cb716338740dfb2fdb9e65f06746cb83f5256431463cd5ef8010643c080dd9ca15dce370e53f26017c193514366","ssdeep":"6144:rd2ne9P/52GLitTjyMFawqAkHSZIH7xZ3WTWGfuT/yif3JceSGU1b6SHwVr:rQaB2yqTjyMIwqAPIWu2iKRwVr","tlshash":"6dc46cd57180b0e517e784ee40bf0509f23b2624780e8971f2b9ccdda9e6559a233fad","size":572078,"data":"","first_seen":"2026-09-16T18:49:14.726173Z","last_seen":"2026-09-16T19:29:52.248598Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/449-ec0691edd9118098.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24e96d5c862a5719ba6fd0148eadd805","sha1":"cc015754006e3e34d78245c14a8512f6b406a78d","sha256":"b282ec8608b7ed320d8332e0937045b1e79d53afdf602a2f5bc0c5030be72256","sha512":"f08b40e5924940267f166421d2d46db5e39168ac33902f8495419652722975e4cb86457d70447ee3ed75862502066c1c77832a7b3bd18da68144547505266f4d","ssdeep":"1536:NIExHXt9H04vilQqbAdCJMq5KHjWeish+IDP:q2d9U4IMwKHjW/sh+Ir","tlshash":"4063b4d8b0d2b021939750ea107f540af33e6994350f8580e278e9da3c795ae927bf7d","size":71796,"data":"","first_seen":"2026-09-16T18:49:14.723501Z","last_seen":"2026-09-16T19:29:52.231287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/759-75d763d13b9ee922.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e705625a2a55ec443e4565ab4031939","sha1":"c53737403cf92785f191d3792e36f323de329ea7","sha256":"baa14c9b0056222ae1caee5a7182654eeb2912e8842582a7ab14b240b584c922","sha512":"15e801ef255ccde854ce7b0e22c1eead61b490246bf4eecfb6e58a29f86d9d0831bc50b49f0e8b209ed39e84ebbd499bb21c653f0e588c6f0a0bb6392044f318","ssdeep":"768:MwRfTTlTaULO4LILgSC+5z0D9W5ELdFnN42g2IHHMq4YYo8Yn6xCaE9/mJVEE8tp:X8ULO4LIUzK2IYOH9/giTTkfkKPC","tlshash":"b983e79cb18abfdcb52345a87a2fa40cb13f2b80de4e48a0f17da45538184d47a57fd9","size":83843,"data":"","first_seen":"2026-09-16T18:49:14.728516Z","last_seen":"2026-09-16T19:29:52.250444Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c848ff409a5b45a5e5339158f24c6f6","sha1":"35cfacc4b776a460ff0400f43ea3f905e94231db","sha256":"95bd5b8030ec070ac049214356838e370f75959d2defec42f0dd512f893ab3da","sha512":"f4428f9aa994f0f72cb01933c9b6b15b33034565f019fd73dfaba200417265d40f95a8a575313689c84896d3bc5e00d98a58296ee6debb608b1edba8dd49cabb","ssdeep":"","tlshash":"d3d023d92c75c8306794014710b5e794357131507711e6c4c1c9cc3f9e11fd305b199d","size":217,"data":"","first_seen":"2026-09-16T19:29:52.280214Z","last_seen":"2026-09-16T19:29:52.280214Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/I_fY_kqwpcLpGeozTlcUR/_ssgManifest.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-09-16T21:48:32.914375Z","times_seen":260575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/fea29d9f-2f2bafd47b649946.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3fdc58441fcaa99765a4120deb4111c","sha1":"cb38a95d4c4ee2bc9222a3d251ca29baad974159","sha256":"e867379b75271900b9fab15cee1cfb634778804eb53150c6f4a229e2eb265113","sha512":"d019c31fe792406203725c9574564937b4af61b2c13f1c3320e719de0f2353788047944af63a02201230f2db1583822f71824a5e9ef7ff022963bfccab817e22","ssdeep":"","tlshash":"bb21af95e7d9eb443c8756706e339813815f357a30cf91e55179c080e6e289ca82f8db","size":1141,"data":"","first_seen":"2026-09-16T18:49:14.717311Z","last_seen":"2026-09-16T19:29:52.229592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/68c0a17d-271d62b721c44097.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc2c07fc098753c3477a7a246823a336","sha1":"068262705e4660d44c87360030a488290c7ab81e","sha256":"39f8a96ae3c59d4bd7e9ec991b5e4f3e0d925ff0729c22f4ed749a55a90a673c","sha512":"60a40be85b12ecd88a9cb5dbf1ace70d9b8c4dee744bd32f7dcfcd8b6ed8481fbd63c521d0d46007c29d79e4b94eef64982fc16d28479f50d38df55dda7d22e3","ssdeep":"","tlshash":"4401d00bb0c22d88fc9a09f44f73442395b90a4fb4ee94d59e704084619159c4a63c5f","size":684,"data":"","first_seen":"2026-09-16T18:49:14.694572Z","last_seen":"2026-09-16T19:29:52.255405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Checking authentication status...","filename":"https://www.ristek.link/_next/static/chunks/pages/_app-869c83ff3b6ab97e.js","line_number":1,"column_number":583023}]},"http":[{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/main-bacde8d9f60e224d.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.047Z","timestamp":1789586944047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/main-bacde8d9f60e224d.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtKkatpB9lsHvqOOhW0JOr5pi1%2B4nJImDK2TAtxUq4m1QyTrv%2F9CaZFBnSmm2Oe3ZL%2Bq7PdUaMDk1T5cLqTC51PHp5aCHqq1pUDNLVAmz1%2Fb%2F8FZ5V%2B0DcBgw8mR5%2FyYddQ%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247205a95f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"main-bacde8d9f60e224d.js\"\r\ncontent-encoding: br\r\netag: W/\"104e41cf428e1b0eef057b1ce9572865\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/main-bacde8d9f60e224d.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7nqst-1789584502183-192434226bd0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":119628,"size_decoded":34044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"104e41cf428e1b0eef057b1ce9572865","sha1":"22e7110b5ff887219e5ed2bd713a13b109bf3d56","sha256":"b27bde70a1d8081a8aa6ba3e71c025f113df037f8d0e9bdd707282e70879e4ed","sha512":"69cdc23b500e5b041e6e4791a3ea2fdae76e922bb31e3feda88eec8b13f997723f661fc40e934c1dd8843ff0a1d47b1afe60226804dcf8a3eb974fcef81ba2c5","ssdeep":"1536:Yu35DFnsy4+VBrZBVTYAnPPEBpJg3uLC3akoMobW:5Rns2VFPPEBpS3ADzS","tlshash":"fdc318d871e2f4a206d361b5403f210af37a5d2aa09de440e36adcd57cb499f9233f69","first_seen":"2026-06-27T08:18:19.234376Z","last_seen":"2026-09-16T19:29:52.200375Z","times_seen":7,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/981-636f8e3cb286bf15.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.088Z","timestamp":1789586944088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/981-636f8e3cb286bf15.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dpmZgQBIgvxT%2BDZAN7L5iQWSHoiESxIL7%2F260e778pvsF1zLy7dOmuc5LvD25V0N2le7Tyx79mqZO51rO7doHKtAi7rBAifxWf8E%2FvARKV4%2F7sc1aa9%2FOYmz6LJ7iPRapQ%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247209aa1f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"981-636f8e3cb286bf15.js\"\r\ncontent-encoding: br\r\netag: W/\"02f0b698afc110530c3ecbcb4e5f4839\"\r\nlast-modified: Tue, 15 Sep 2026 13:12:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/981-636f8e3cb286bf15.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d87d5-1789584502199-c36b29965c66\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30954,"size_decoded":10491,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30905)","md5":"02f0b698afc110530c3ecbcb4e5f4839","sha1":"78d7fd1f263ad7b8d61a223ff0102fa16010f845","sha256":"d6fd0c49c03c22585eff0aff0376bbf43f30fa93a69f6394631afeef00aa82f1","sha512":"866067683634c4b84ac02c035e82fc5f487d3e48c9c74082d02c7e6ac12f5cd7aeb76623436971e2f9d851ffa7ebb8875033bfd9a6bb0aeb7b5eccd3e3980401","ssdeep":"768:20BLfls59CIL7FuaVie5mP1DBQCTgU+hhzLZk3sm8Jw8+2LUW5KC:rLfl4pZkrtgfhzLZk3sm8e72LUWMC","tlshash":"62d2a4ccf586beacb51714a8792f900db23f2e80cd0d8921f53ea49526690c9b657fc9","first_seen":"2026-09-16T18:49:14.730471Z","last_seen":"2026-09-16T19:29:52.203817Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/MapPointerPurple.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.316Z","timestamp":1789586945316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/MapPointerPurple.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4buXSLKFO6TscTbHaoHVrKsww7lEWGGekokyvIbzCtczC%2BKw%2BUBYs9f6Ar0jCTnZ5vQT9eK4xG1O4N5SfO7eTwVxXS3iLA5yhaoJNcJ%2BaWKm%2BngfXRWKFNxVj7GnD0WpOds%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247284b7df294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 496837\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"MapPointerPurple.svg\"\r\ncontent-encoding: br\r\netag: W/\"c6052914f874465893c465f1e2a0f690\"\r\nlast-modified: Fri, 11 Sep 2026 00:47:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/MapPointerPurple.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8vwv4-1789584503344-48652ce6229d\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1459,"size_decoded":1689,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6052914f874465893c465f1e2a0f690","sha1":"5bbb6d475730c74793c32ab614c6006715a8d69d","sha256":"323017dea75d5787f4d335403b14c6c98e45ec377865f2cbae34718debb552c6","sha512":"e11603c2ec26b4a263d36300e3a734586357f9e1b107b5bee705d528efeec30444f4c4dd9cf75beb9dc3d12dbd489d2aa4410003388099c3f6a11180b9951c04","ssdeep":"","tlshash":"133130fd239844c4b6cf4f96ee36eb57e7bd1ce60789924400888c54c8351dac888ca8","first_seen":"2026-06-27T08:18:19.223928Z","last_seen":"2026-09-16T19:29:52.210014Z","times_seen":7,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/bd1a647f-f7a2dd3a1afcce46.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.059Z","timestamp":1789586944059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/bd1a647f-f7a2dd3a1afcce46.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e6ZT72csbeCyLUfciBNhdnloVeXeHbQIXfhiocA792fAgakBMLymrji38%2FFCby1PIu0m2V9%2FoOpQ7QzMWap5pJj8e54iOIlOHfi1bMMUI69VZfPjJO02puZJNsJRooB22%2FE%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247206a99f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"bd1a647f-f7a2dd3a1afcce46.js\"\r\ncontent-encoding: br\r\netag: W/\"e53e9ad371d102c10e65524acd593431\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/bd1a647f-f7a2dd3a1afcce46.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::klv5m-1789584502193-c48b0c3e93db\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":104119,"size_decoded":34940,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e53e9ad371d102c10e65524acd593431","sha1":"e58d788f2c51a21927c5701605d1d08686355e3e","sha256":"12bd2144bedb82e5aa1db624db2f30036bedb43ff30395cdd3686766fd02de3b","sha512":"2da89b86d05d490502b616f79dd5803093fba5e18d26829cdf61619ad269f8d181552a7d4125e2bf42acfa1984a09e4c044620613657ab7cb2988f184b6e3bec","ssdeep":"1536:2tMCtkVdbzVAoINm+BNlCMRYWCqpNNNHRxuS:2tq2mI9JsS","tlshash":"2ca3b6c8f791b0219397a075c17f061ab33b7998644980a8b277e4c77c7829d9227f7e","first_seen":"2026-09-16T18:49:14.643691Z","last_seen":"2026-09-16T19:29:52.215628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/icons/instagram.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.321Z","timestamp":1789586945321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/icons/instagram.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UG5KZKgdvnIN2%2BThghM9kkR2SONskfrF2JtFzd0VX%2FyHHCUsfTuNM9SEEdVvpTdLY4r309CTiaoVnQQ7yWPlydhgNAqs%2FH%2FYhJiBIqGluRkWXgQMlofT8e5qo0%2Fu82Am76A%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247285b80f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 495975\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"instagram.svg\"\r\ncontent-encoding: br\r\netag: W/\"430ad543f1b63bfa09a5639db2700cb3\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/icons/instagram.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zd9n5-1789584503353-56c078bc1d7f\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2553,"size_decoded":2176,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"430ad543f1b63bfa09a5639db2700cb3","sha1":"0c2029c2cf0c4d7a40e92ee466ce521481a45507","sha256":"eb28d0cf9e6dab44d765d1dfd02f503d956153aec0722f2d222ade02b41e4396","sha512":"e8b8c1da2fa43239e4a8f7e27a000cf27ec87990830df85d92122bc8d0717622a85d0f0b020bef772eeb0b3eac7e9b901d0d24428524a9c111e6ddb1295a250c","ssdeep":"","tlshash":"425196ea62ec22e17547c7b0de31a451352320fe2fa5dbc58383cd509ab103ed94c895","first_seen":"2025-07-14T14:17:23.338102Z","last_seen":"2026-09-16T19:29:52.218269Z","times_seen":20,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/url-shortener/categorization.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.304Z","timestamp":1789586945304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/url-shortener/categorization.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnF0VO3ShF%2B7aBT4YwqA4F3xP3YuIxZbUVKc4tkSP9EIcGjqdji8qRIpD9mPugdAih1EcRH40tp5OcXa0VupTg38ySg99QCB5ufjC2pyyMmuk8pQs3XEQVnK5gW98KktYlU%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247283b79f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 134\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"categorization.svg\"\r\ncontent-encoding: br\r\netag: W/\"6166d73a465ff7f630c0f6f333e6b55a\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/url-shortener/categorization.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hh646-1789584503335-f787d8ef25c7\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12713,"size_decoded":5106,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6166d73a465ff7f630c0f6f333e6b55a","sha1":"c4452c5fbf34fda82aa021c76f6c450bd06d3e17","sha256":"c1672f28652669b141c9137ad70d6a0093b73e54c259220f65887cd4ab42a24d","sha512":"d75a88f47e7081bb8dd7fff458cb0c85eb8143cdb350e8fca4156797c714c408885ada582dab0f5f52553afb501d096fa4bd6a9bda260b82aaaaf6d9b967cc94","ssdeep":"192:Akk3RhTK5hhh69AnyPgjYAGkPHRJiJ5UuUmYCM3qLfLoLLLh:t53nyPgzGAJiJiZbRqLfLoLLLh","tlshash":"c04296d033b9e7bde44453b9e77b68a23f3e60f9b2008118ce6e2d01a44299bdd5b5c5","first_seen":"2026-09-16T18:49:14.664349Z","last_seen":"2026-09-16T19:29:52.219535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/icons/twitter.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.322Z","timestamp":1789586945322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/icons/twitter.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soMY%2FJ4dnzivgZC0yiITMNu5r8nQYncy1I81C9lQnn5o7lgO1S%2B%2FE7DyYRGbe1wZM4LR3yXT65HoTw7Xq5J7j57qna0yWkslZTIyCb7XpVlkd4vYr%2FXa2ciP6cxqAsBcI1E%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247285b81f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 20328\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"twitter.svg\"\r\ncontent-encoding: br\r\netag: W/\"0d0c09201b38dd94327b52f004663062\"\r\nlast-modified: Wed, 16 Sep 2026 13:09:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/icons/twitter.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4fshf-1789584503351-3a4d56d9bba2\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1495,"size_decoded":1805,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d0c09201b38dd94327b52f004663062","sha1":"045ee283310aee75f8fdf9b8eb18d9af8576e0f8","sha256":"6f1c34bf183e91d67bbd6321c380b3a27d3d3655abb03c72897ef32d6855bd1a","sha512":"91438c2d30f35a0a4e8a07505f9c02b7a66caa1a0256a7b6e7d4c59d6c67b5d0cc60627c766d97ba7f1b27da639d43e7e38e8a7587698c3929ad7d38b9303fc4","ssdeep":"","tlshash":"303135f4d3b8c1d0610ad3e4df26593a142d28fb2f67d9ab4afd5840a27029e8c08cf4","first_seen":"2025-07-14T14:17:23.3462Z","last_seen":"2026-09-16T19:29:52.22122Z","times_seen":20,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/icons/linkedin.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.326Z","timestamp":1789586945326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/icons/linkedin.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsjafgU9839%2Bk1DFxkz00527D3oC4Ne2oh09xDhUjZMMUXSOwx0G6%2BrTBFbnCZWmfVxUo%2FNz0iUzVLdaZG%2FHhXDQECWSmrkuN7rFEo2so%2FIhegAgHcCDJW9jY1ZFCajiHZc%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3c247285b84f294-CPH\r\ncf-cache-status: REVALIDATED\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 495975\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"linkedin.svg\"\r\netag: W/\"4dcf2346471124b7fb859d2b8f460d65\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /images/icons/linkedin.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6sv9m-1789584503353-20d75bcb6dd2\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":749,"size_decoded":1416,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4dcf2346471124b7fb859d2b8f460d65","sha1":"0f31e17875717722de95febec40c6e3a3869a20d","sha256":"72d36900b230743cc93119245cd6bcae12af79bc7ff3c8ffef7066ec258ba926","sha512":"67616e818b56ed48b41d8d6b6ac212100e9506294a44be0ca3afb10ca179cc28caaa6a3b5599815465daab54899be0992c26471dadb4e1e411d9a2b7996036ca","ssdeep":"","tlshash":"c00115d4ba6c21d8e1008fb0d02a25750aaf78f57fa14c6ed2848a14f3107ea0c8dcd1","first_seen":"2025-07-14T14:17:23.323986Z","last_seen":"2026-09-16T19:29:52.22206Z","times_seen":20,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/logo.ico","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.517Z","timestamp":1789586945517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /logo.ico HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqPUPWKv3h7GmzVVmFAhbiuYh%2FMBfkb1Skxlis9w3Sz9adxuWvWCEgunWiX1RBmV6AknCSwZtxiF8MDpzlsqWEDYaXpXmdeMb6u4LQuuju1kxF8IrArP%2FNM6no8NhWXtKzw%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=6,i=?0\r\ncf-ray: a3c247298ba3f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 495976\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.ico\"\r\ncontent-encoding: br\r\netag: W/\"50ab7f8ddbece90d5e550c6980d24d11\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /logo.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nm9fv-1789584503526-0bf0151fd0a9\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250334,"size_decoded":6806,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x-19, 32 bits/pixel","md5":"50ab7f8ddbece90d5e550c6980d24d11","sha1":"1186dbf526585a13bd8e824156e4a4611b8b319e","sha256":"f01e7e4b905d814af8864e647ca8fc1bb202a627d26ff1e009f85838eb957dac","sha512":"7cb96352631db0ed18d0502bb0637574cfa841365dffee305f3b2f9a08288ff2be4631ccc5ab05eefd8937cfc6794ebbdb9f10da49d5c78176c805182cf84dfd","ssdeep":"384:DxUUUUUUUUUUUUUUUUUUUUUUUUUt1UUUUUUUUUUUUUUUUUUUUUUUUUUxUUUUUUU1:eQxwTUE/kTjoNOtf","tlshash":"f13426a9763ba686cc637bf59d85c4073302fc682e1470067490b7bed47daf18eaca51","first_seen":"2025-07-14T14:17:23.333825Z","last_seen":"2026-09-16T19:29:52.222976Z","times_seen":20,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/I_fY_kqwpcLpGeozTlcUR/_middlewareManifest.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.102Z","timestamp":1789586944102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/I_fY_kqwpcLpGeozTlcUR/_middlewareManifest.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8GAAewVFC3%2FKMb%2B038Ua7k1GZUvTMK3oIbNotcETlVu%2BB2KdVRS1p9rt0V8G8XQYbKBf3Y9KtRH%2F5B4Mf1EBWsuIKzukqs7wddtSDNWI4dFkT9i9sm%2FtgP%2BjCbw0HzUBw4%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3c24720baabf294-CPH\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_middlewareManifest.js\"\r\netag: W/\"5a36926d6826e83fbe9e601367cd6dd8\"\r\nlast-modified: Tue, 15 Sep 2026 09:51:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/I_fY_kqwpcLpGeozTlcUR/_middlewareManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hltcn-1789584502203-71adea67f624\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":1126,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"5a36926d6826e83fbe9e601367cd6dd8","sha1":"c3b120282b4af7868c41bc2cb82fd29f1197ac8a","sha256":"d4d5e89c935c7de12726b28fc2e6b6af5a3464425e8b0ff6cefffffbb827089b","sha512":"9b0bb5738b2a56c992a40f8f94f98e5cd36dc840bf34c529ae60acd00a36768e895c659f9d8497411d34120d3fa9f78417bfce6c356c3e2d716218a4ff244f71","ssdeep":"","tlshash":"8cb092a8c82ee82cc8238cda87726342aff05a8a918fc4370190305a813028f2808c00","first_seen":"2025-09-21T03:44:33.190282Z","last_seen":"2026-09-16T19:29:52.22396Z","times_seen":10,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.832Z","timestamp":1789586944832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3c247254afcf294-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T21:51:44.748211Z","times_seen":18502920,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/url-shortener/generate-qr.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.300Z","timestamp":1789586945300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/url-shortener/generate-qr.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALWfdYhf9HUoqygtWeyvYt9GpVXuwC7zfE8tl1vN3tLiqZAo5esqk%2B3dIDqq3z%2BIeCXhLQdQ9QiEgyxsiI5GInf9qDyWVnUDVcHF84Adzj6ElVa74lGV9%2Fk9LKMqboUoqVY%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247282b76f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 107116\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"generate-qr.svg\"\r\ncontent-encoding: br\r\netag: W/\"8b5e56a93d2ef3669edec4f589aa0c36\"\r\nlast-modified: Tue, 15 Sep 2026 13:03:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/url-shortener/generate-qr.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::96b5l-1789584503328-9c0372bb552c\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2083,"size_decoded":1740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b5e56a93d2ef3669edec4f589aa0c36","sha1":"f7b072eb0a1bece02161838badb069bf20e04338","sha256":"3dffd454bbf2965b61df13aca8da25a1133a1c4ebe6c29e0c9248fee00b88fcc","sha512":"6391abfc33d306bc3e78ee24c36fe17739f196cf3a53c30ffe62b73697f7a2c94048474cb4ad18368ef588b0d209f008c88ed74d7572831937ee9e28188140da","ssdeep":"","tlshash":"db4120e13258a6f5a811833cc69d69f6303b54cd7b208064ebf02f1a6ca56bb5c5c7c2","first_seen":"2026-09-16T18:49:14.696907Z","last_seen":"2026-09-16T19:29:52.226406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/icons/medium.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.325Z","timestamp":1789586945325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/icons/medium.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KERfjt%2B12ikxmGiMu4KhtgemtyWJv%2FVyGVOz93R6tgFI%2BvtgrBhwkYCNotgMaJFOQOlRA%2FQmjWr4MEMmiJK%2Fbpho78Zqq2Dn2%2ByaLhRdvvw2DvDfN71QLjlADC%2BbSPHSusQ%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3c247285b83f294-CPH\r\ncf-cache-status: REVALIDATED\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 495975\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"medium.svg\"\r\netag: W/\"b23a815ed37567b4e2008a80dda76ef3\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /images/icons/medium.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tn87t-1789584503356-d9c899879c76\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":881,"size_decoded":1507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b23a815ed37567b4e2008a80dda76ef3","sha1":"e3006d852616e964a9fee1b08b97a0c4bb58e2cf","sha256":"5a4ad701cd743266045a513bacb731c6f2c573741d396d0770dc54b84241b9ec","sha512":"7cebae6c7af3d90db93f04e12c603d0eee7c9cbd074cf7ed62e5caa44f8abbee10d0ce6d3472c49c077b80529a14d78dce02555ecc0837340f64f93dec8e8af9","ssdeep":"","tlshash":"5711efb353e923f08141c369ea301976b19318fe36dc8f4d92409b50b59602da8ccc10","first_seen":"2025-07-14T14:17:23.339065Z","last_seen":"2026-09-16T19:29:52.228642Z","times_seen":20,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/fea29d9f-2f2bafd47b649946.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.054Z","timestamp":1789586944054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/fea29d9f-2f2bafd47b649946.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BU%2FRquO4MzOAp5ohgCtOmlAOzzZW%2FUtbmdBCYO7bJM2%2FqBRjeIm0eBgqQlVMLhu9LO%2FLIEq3TXYa5vBJpy7wypBuAO7Hvt04c8RAXqf7oUkAF2I5um4gytwu8%2Fxnsiy1n0%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247206a97f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"fea29d9f-2f2bafd47b649946.js\"\r\ncontent-encoding: br\r\netag: W/\"b3fdc58441fcaa99765a4120deb4111c\"\r\nlast-modified: Tue, 15 Sep 2026 13:12:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/fea29d9f-2f2bafd47b649946.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vf665-1789584502191-ba9ce0b61990\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1141,"size_decoded":1632,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1087)","md5":"b3fdc58441fcaa99765a4120deb4111c","sha1":"cb38a95d4c4ee2bc9222a3d251ca29baad974159","sha256":"e867379b75271900b9fab15cee1cfb634778804eb53150c6f4a229e2eb265113","sha512":"d019c31fe792406203725c9574564937b4af61b2c13f1c3320e719de0f2353788047944af63a02201230f2db1583822f71824a5e9ef7ff022963bfccab817e22","ssdeep":"","tlshash":"bb21af95e7d9eb443c8756706e339813815f357a30cf91e55179c080e6e289ca82f8db","first_seen":"2026-09-16T18:49:14.717311Z","last_seen":"2026-09-16T19:29:52.229592Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/449-ec0691edd9118098.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.077Z","timestamp":1789586944077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/449-ec0691edd9118098.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjaxc9HWB9Akulw904VdowrPsxJJbJcNiWZVJR57TmMxG0RkIuTDZRkiAgUYuaN33FzneI6LtHlocrFuHJQuK%2FmhQsbs2wlyWNcrbgXbThpSvVMOWhN2j33Ur7i14x6QO%2B4%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247208a9ff294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"449-ec0691edd9118098.js\"\r\ncontent-encoding: br\r\netag: W/\"24e96d5c862a5719ba6fd0148eadd805\"\r\nlast-modified: Tue, 15 Sep 2026 13:12:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/449-ec0691edd9118098.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g7frk-1789584502201-48ccc4d130e5\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71796,"size_decoded":29644,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"24e96d5c862a5719ba6fd0148eadd805","sha1":"cc015754006e3e34d78245c14a8512f6b406a78d","sha256":"b282ec8608b7ed320d8332e0937045b1e79d53afdf602a2f5bc0c5030be72256","sha512":"f08b40e5924940267f166421d2d46db5e39168ac33902f8495419652722975e4cb86457d70447ee3ed75862502066c1c77832a7b3bd18da68144547505266f4d","ssdeep":"1536:NIExHXt9H04vilQqbAdCJMq5KHjWeish+IDP:q2d9U4IMwKHjW/sh+Ir","tlshash":"4063b4d8b0d2b021939750ea107f540af33e6994350f8580e278e9da3c795ae927bf7d","first_seen":"2026-09-16T18:49:14.723501Z","last_seen":"2026-09-16T19:29:52.231287Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/I_fY_kqwpcLpGeozTlcUR/_buildManifest.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.096Z","timestamp":1789586944096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/I_fY_kqwpcLpGeozTlcUR/_buildManifest.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1XGltQ2rBwxM9ixVqG3PtkKhA0c91j99OlSJTwdhFTvY9E738xEdtU%2BZP7bo3Ch4MEiczWHwIDfiwygCDzaBN18zdkuQfg0ZdniUGJXeSqiI4CJPsSmmceGkv3ePkhr3j8%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c24720aaa3f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-encoding: br\r\netag: W/\"512854f04cbf291cc25caf05c260c6f0\"\r\nlast-modified: Sat, 12 Sep 2026 09:48:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/I_fY_kqwpcLpGeozTlcUR/_buildManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lx894-1789584502201-33f2c2eea37c\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2274,"size_decoded":2010,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2274), with no line terminators","md5":"512854f04cbf291cc25caf05c260c6f0","sha1":"a5144f9fb9207ec095cd76d0f5460791a4fc35ba","sha256":"a8a7d01afd2f0649bed8f34b863c938646868433f190f0d1aceca70831c127d7","sha512":"3ecfa89984c2e4b93edaf6b284239859d359f5d7c6ba680b8692fc80a7747aa3fc50f02f2bc77e43d95bc712935c14047acb97ae23a803af04ee8e08fbcb21c4","ssdeep":"","tlshash":"ac419d474854f4110ef0cccd382b3753ca80e933a63406a9d7bc5e6845956b79b9d826","first_seen":"2026-06-27T08:18:19.221781Z","last_seen":"2026-09-16T19:29:52.233432Z","times_seen":7,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/LayoutKiriLink.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.306Z","timestamp":1789586945306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/LayoutKiriLink.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXYDdsFyWn4Z1%2Fj%2FxGj47UvI2puIlbH4vuwlhU95IXqBot0ukgrUhvJf8e7cdGEu1WowMBXLKcobD04Mxu3NJIH0mM6XgFcps5pEbsGVOsMXg7UOogWwmYyBSIwEXANVeCk%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247283b7af294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 20328\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"LayoutKiriLink.svg\"\r\ncontent-encoding: br\r\netag: W/\"8c1bbb8eb4b77c20ba1ca5fb8d0312d0\"\r\nlast-modified: Wed, 16 Sep 2026 13:09:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/LayoutKiriLink.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qpcwq-1789584503338-ee79558d92b3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10376,"size_decoded":3945,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c1bbb8eb4b77c20ba1ca5fb8d0312d0","sha1":"9582d2c5ce7707794bac7918ee8d6fb41ec030c3","sha256":"6696a8f26c65a2c27c4603e20aaa74ba2b64b572a3e46b7ded6d9d030c51c207","sha512":"aa27c0a27c3589f61a33ac9163f041b00a87f87da982d0c9787fb88f4306983ffc06e777885d414a1d2901f6123b88e303f7cf706462003f24a408191bb1390a","ssdeep":"192:wQZf63psRTrREHmIp9kpqsWBxqcEY0oifT/PVmIH:pCZsRTr6qpDUqYzyT//H","tlshash":"ba22d9cc33a80beccd484bd95b1a34fd627b70e86a124644d28c5e4758d7aae5c6cec9","first_seen":"2026-06-27T08:18:19.24588Z","last_seen":"2026-09-16T19:29:52.2346Z","times_seen":7,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/LayoutBawahLink.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.308Z","timestamp":1789586945308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/LayoutBawahLink.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6ne9bMlGimdmfTYM3N9YI71EO3f3IuetrATT%2FdVKCewrfAcO7hwzdY22xjcNimlQvokEDFolF2OCyHUC3IW41TaJbeWUSX62VhHMzVhYwHZ42Em7OTYFuqPVSnMEiW7Ov8%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247283b7bf294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 495975\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"LayoutBawahLink.svg\"\r\ncontent-encoding: br\r\netag: W/\"6f30a69ff9c3e1e90395d0af16301f17\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/LayoutBawahLink.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d7rhn-1789584503336-5dfaa011d8d2\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4889,"size_decoded":2621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f30a69ff9c3e1e90395d0af16301f17","sha1":"71a05c0bf910a9d4f9056542527ad2506da17bf5","sha256":"fac336417ad37eeca1e7468e9708a38ae7bff5a076a8763367ece22f86a19216","sha512":"bafe8324033426368fd524ff32fa693b40311323bd2a44756d63b04e4bcf48a5623c3fc499df78afa4e908b08760fc76eb27fdbda017202b127d3440fb81a4d1","ssdeep":"48:dkVioBU/xjrCvevmqlqS+eT96tABLOFSXTk89OhRNS9r9TarKaYXhV7Lr6mIV509:8crCsgWUZ8EhzYwVGfcKOgAuka2rPlGh","tlshash":"4aa121dc3228d1f5f90157f1d26f34b9341bd0ea29114178d79a2b0268e9e5e0d6feca","first_seen":"2026-06-27T08:18:19.222906Z","last_seen":"2026-09-16T19:29:52.235597Z","times_seen":7,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/media/poppins-latin-400-normal.916d3686.woff2","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.830Z","timestamp":1789586944830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/media/poppins-latin-400-normal.916d3686.woff2 HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/_next/static/css/864b5562689ebf55.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3c247253afbf294-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"poppins-latin-400-normal.916d3686.woff2\"\r\netag: \"9212f6f9860f9fc6c69b02fedf6db8c3\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/poppins-latin-400-normal.916d3686.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kdqrk-1789584502930-8720a9544cd7\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmUKlRhWd9xVVypB89fjCgpzfhxOXzx8p4pSHRvIqN1PSqWj39%2B%2BDlZkV50ZX7j7gk8WgG3su2OF7fwIEu0Jgci1w%2BUYASju%2FphVXxnzztTu43eA84bceGPWK4Z0mlM5sjs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7884,"size_decoded":8938,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-09-16T21:55:17.465304Z","times_seen":404294,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/url-shortener/track-performance.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.301Z","timestamp":1789586945301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/url-shortener/track-performance.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwwY650yAfoLmG1fkFldEMIjhbVuURwtRtPkGLg3J5FH0mfW%2FrxXSTOrpQEt%2FQCFVELYhkKekBPEAMeLvWCbR0He6S%2BIy%2FTinQaKzpberQVemXj9SAl3Okg%2FR%2F%2F7U4Nap6E%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247283b77f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 107117\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"track-performance.svg\"\r\ncontent-encoding: br\r\netag: W/\"80af475a1830166f7e7130d93b957170\"\r\nlast-modified: Tue, 15 Sep 2026 13:03:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/url-shortener/track-performance.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::klv5m-1789584503332-2cb7a2f330bd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":44848,"size_decoded":19869,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80af475a1830166f7e7130d93b957170","sha1":"065316c3c2973102bad0cb34253da17190e7091c","sha256":"a03abb314e928e486cc0bfd6f08c25fbbc5cdc5e9fc9eaad08d376a306ff6a57","sha512":"9aa02f96bc0259d2f6a95eee4cd689c7c761477999f3a6f8e7a070f2effaf5dc1a7dcfd0ea4feaa7ded6d95f91d60b59433d9edb9225e365ebd3327daa2bab68","ssdeep":"768:wV9y3LJJCEvcz8wfuE13kXIqIeqH0i7W50ZMrRB2v6QWyi6iC4oC:wvy3CEq8wW83A+HReIWN6k","tlshash":"c313e7dd7be463f8f402f3e5ce2680b47e5f24fa7751ca78c3a56d84a14606d88998c2","first_seen":"2026-09-16T18:49:14.715017Z","last_seen":"2026-09-16T19:29:52.23829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/icons/line.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.320Z","timestamp":1789586945320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/icons/line.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTEuWKgyq3%2BMvhzVVsgrVYqqtmjP9iVIFG8cWn09NlL0oEW0m8cqeFrjMjZvdZCvHrrhIZ77yDO1LntxsUtJdJVeNfu1k%2BTAVriCV1f4QtXGZlqHZ05bXnkn9Lx9eNWPOHE%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247284b7ff294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 496837\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"line.svg\"\r\ncontent-encoding: br\r\netag: W/\"90148e0ff14a30a05f81136e7102a023\"\r\nlast-modified: Fri, 11 Sep 2026 00:47:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/icons/line.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tzc2x-1789584503350-d7ef07be329e\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4302,"size_decoded":2900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90148e0ff14a30a05f81136e7102a023","sha1":"2eece058b38c5b90100b7a8e0791913b46c339fb","sha256":"a2ac028dcda05e44bd996036c9d414e0dffc144959e604b267e015691345e055","sha512":"5d2bdf88cbf74bb01c4b52d89dafdd6a3ee737160a1df2d00472235729a77005b92eac7f9bda6334aab612b51c30b483c84299a6f77447a2ba196b0883893dd5","ssdeep":"96:+9w8k/bFNQnCY+qF5IqRLhONwl2Sc0VI1HjuGw:+qlxNQOqH/MN0g1HjuGw","tlshash":"81912efb73c5f6e0e80aebe0e43159b6272b3cbab715d7a55299efd4a26110d4488c04","first_seen":"2025-07-14T14:17:23.325832Z","last_seen":"2026-09-16T19:29:52.240229Z","times_seen":20,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:29:03.638Z","timestamp":1789586943638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 16 Sep 2026 19:29:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3c2471dda73f294-CPH\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\nage: 563529\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\nlast-modified: Thu, 10 Sep 2026 06:56:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xf26w-1789586943758-52cc18dcae9c\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NIQhGfF8WSiKNrhgE6xakYqWiw%2BSDu%2FosPOwYs7Txq5cxDbWl76Ri2HbvbWdkXoPpZiGThHCSHuSfsb0ZFgz%2F%2BqIY%2FukBGjh1yJQ1qF%2FMl7LL8w%2FWHQ6p%2FAixvYkIC6xovA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3022,"size_decoded":2135,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3022), with no line terminators","md5":"045ae92be8a6a98be9ddca109dcf43d6","sha1":"94ba5cc3d8c7fd09567fb545e5eb359bc3c46337","sha256":"4c6f3e76d9ca184112aab6df9e91a636ebf969efbd94cc1c8f14ff6b4f838711","sha512":"75fc864249482b970ad325f4c6d44eb56194dfc3b9035b968c3af5ba6d73f37b88e17c74fcda79b719a52e2ae0e51c3781a378545b4f5c5cf75cf2b542d5b759","ssdeep":"","tlshash":"6951ae93ad1fce19491188cc603bf31e251ac436d974d488a7ecc85d0665fcb4e9ec85","first_seen":"2026-09-16T19:29:52.24121Z","last_seen":"2026-09-16T19:29:52.24121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":5,"connect":21,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/framework-ebc429d7da2ee2be.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.045Z","timestamp":1789586944045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/framework-ebc429d7da2ee2be.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4GYkKi3Y8nbFZNTS4JJmRSsueTPI0t76TinBwJ%2FOfBehED362SFxT18EPzyEan61xnlV%2FUz0gnqbhGW%2F9AOE3QGKV9zWOPLu8Xr23nC%2BqcY1ouT3nN%2BM8IRN9%2FMWXsJ18s%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247205a94f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"framework-ebc429d7da2ee2be.js\"\r\ncontent-encoding: br\r\netag: W/\"f464ec7a9ca91e0955a2603ee844277b\"\r\nlast-modified: Tue, 15 Sep 2026 11:03:27 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/framework-ebc429d7da2ee2be.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m8dq4-1789584502178-3f6e014c16c5\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":141018,"size_decoded":47851,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f464ec7a9ca91e0955a2603ee844277b","sha1":"743584d3d46b443ee329423d7152fcb8f6dc75a2","sha256":"c1e29e3c6f65587bc7db21c40aa98a31a4c562b0d9ccce1f21236149c8c7db1e","sha512":"b9036ee757e53b485f91e306363990e36676921d6a037b239ceae70f76a8a375653c047a3b97874d6fc189bca3f43a43d35b3af6e780d1d344b44a2f3607fad7","ssdeep":"1536:0vlesNeZ3jR4o2RQ/hmXz4fwKYhOIAMiUqI8ix+vQm1dqEeQNR:0aJmvKgiUB8ix6NR","tlshash":"28d317e83992f5516ab312a700ef1807733d5a1b280c4990a215fd9eb5f846fb17becd","first_seen":"2026-06-27T08:18:19.237535Z","last_seen":"2026-09-16T19:29:52.243727Z","times_seen":7,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.253Z","timestamp":1789586945253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:51 GMT","end":"Mon, 02 Nov 2026 08:39:50 GMT"},"fingerprint":{"sha1":"FC:B8:DC:ED:6F:0B:18:09:F8:63:FD:24:B5:43:5B:82:24:12:8D:CE","sha256":"AE:2E:F5:9B:87:A8:3F:F9:28:7F:20:01:D3:0B:0D:96:0C:5D:E4:B6:0C:7C:14:E6:F7:92:2C:95:FF:78:7D:0E"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Wed, 16 Sep 2026 19:29:05 GMT\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncache-control: private, max-age=1800\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-xM_rANNSDNI9GaiEb-Ixmw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271703,"size_decoded":101524,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"7e9e499a78b2f6038a5fb969a9b410b6","sha1":"231c873d126bbdeed597f6d8dff84780a9004baa","sha256":"aff6a0086039e73a61ff914edbd6dac14d94494cd4ba570342f032ee7c2fbf70","sha512":"b13b2a558b9f6cfc30963ca2d5048f5978441b449c7bbe79ac96673f30ecc5a0ea96ab887f492a424ab4c9c0dfab4ec9e4987256846f87bfd1d418af3a05e9c6","ssdeep":"6144:WTd+37hxy5esIJFTS/0o5Sfwnkc+8MAaCna90EkU:WTwssQ/0o5isHdMAaCna90BU","tlshash":"b8444adcb6e270359212f8b5c43f410bb076a679f4498cacba94c6f5acb0d890167f79","first_seen":"2026-09-16T13:40:13.708644Z","last_seen":"2026-09-16T22:11:24.884571Z","times_seen":75,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":2,"connect":17,"send":0,"wait":51,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/url-shortener/save-link-qr.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.298Z","timestamp":1789586945298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/url-shortener/save-link-qr.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JSsSyR432SgQBLvfzMUXHw2AjVw2Btpa6tQlcruEBrwVmNRTJRB%2FWxaENNL3hWW0WucX%2F9uaIql1a9gRBnlg7aqnT94qxZhGEMlWbzovYYI3b7jGA1VoGVETzotCEur5eE%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247282b75f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 134\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"save-link-qr.svg\"\r\ncontent-encoding: br\r\netag: W/\"f3d41a263733a023c4ffece6c895ab40\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/url-shortener/save-link-qr.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zkfzp-1789584503325-01e59ff334e9\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15323,"size_decoded":6377,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3d41a263733a023c4ffece6c895ab40","sha1":"f05dbed08e2b6134adcf94e9cfbd8e7358f38005","sha256":"0588d4e2f56b09dbcc2380857f91ead1abdafaeb29de832a5e8cac7420eb1a79","sha512":"96a9b66390fba65a6e581c5508a7c29d8cf724ddf2ec3a57c122b724fb4e7c7b2a84c332f1a22da00b8e53115db38661b83db12817c921b38885906704cb583a","ssdeep":"192:kZyIjMpDGSHYtW3Il4QAE5k8kslHFgFv7n1mhsKMkhBM42pFJ5OSq3GwkwRmoSBm:kZtjMdTIWUxAE5k8kyiZpKTCXPk9ZqZi","tlshash":"9062e8c8377092ecf501f2b8c7ba55f57b2e28f576008868c7ed2d1a94520acc5be8c6","first_seen":"2026-09-16T18:49:14.734718Z","last_seen":"2026-09-16T19:29:52.245701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/favicon.ico","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.968Z","timestamp":1789586944968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZECGkJ%2FnHGIyl%2FkB0zpR90YeggjrrTQW7TPTwxjVSOxevZ3m0FJLS1K1MBGKwBUp6rjIpu%2Bijzn0ycf%2Fkii2h8l9K%2Be0Wl42pfocuTTrhPpOxV1Gtu1fehqLTmGk3vl90ww%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=6,i=?0\r\ncf-ray: a3c247261b06f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 1357282\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\netag: W/\"50ab7f8ddbece90d5e550c6980d24d11\"\r\nlast-modified: Sat, 22 Aug 2026 13:12:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r66ts-1788761657793-01e5615894eb\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250334,"size_decoded":6819,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x-19, 32 bits/pixel","md5":"50ab7f8ddbece90d5e550c6980d24d11","sha1":"1186dbf526585a13bd8e824156e4a4611b8b319e","sha256":"f01e7e4b905d814af8864e647ca8fc1bb202a627d26ff1e009f85838eb957dac","sha512":"7cb96352631db0ed18d0502bb0637574cfa841365dffee305f3b2f9a08288ff2be4631ccc5ab05eefd8937cfc6794ebbdb9f10da49d5c78176c805182cf84dfd","ssdeep":"384:DxUUUUUUUUUUUUUUUUUUUUUUUUUt1UUUUUUUUUUUUUUUUUUUUUUUUUUxUUUUUUU1:eQxwTUE/kTjoNOtf","tlshash":"f13426a9763ba686cc637bf59d85c4073302fc682e1470067490b7bed47daf18eaca51","first_seen":"2025-07-14T14:17:23.333825Z","last_seen":"2026-09-16T19:29:52.222976Z","times_seen":20,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/269-cae8a9005e699d52.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.075Z","timestamp":1789586944075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/269-cae8a9005e699d52.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMdgEDA3Bu%2BT1clwSJWa6s6UZqVLTDw9tGJacGWN4ay0r1oA9q81AAYx7bbAmaOPPVOZXLEYsUARRcWLpKKcEO1BSzT9sV4s4Swk%2F3XMdA7wKdURf4qtdBfBztdTAiUBdUs%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247208a9df294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"269-cae8a9005e699d52.js\"\r\ncontent-encoding: br\r\netag: W/\"131f3da770460c0828574c6df15ed0ec\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/269-cae8a9005e699d52.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zkfzp-1789584502200-874bee36e72b\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572078,"size_decoded":174128,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"131f3da770460c0828574c6df15ed0ec","sha1":"643d41e41f2b6fc1b562c2727aa7b40204292cb9","sha256":"04751e4201451b4f8aebd48d19d7488120c312f879ba9f2d55dd500ccebfa09b","sha512":"f8aae07e1fd3b830aba9ba394e8906f0d0e51cb716338740dfb2fdb9e65f06746cb83f5256431463cd5ef8010643c080dd9ca15dce370e53f26017c193514366","ssdeep":"6144:rd2ne9P/52GLitTjyMFawqAkHSZIH7xZ3WTWGfuT/yif3JceSGU1b6SHwVr:rQaB2yqTjyMIwqAPIWu2iKRwVr","tlshash":"6dc46cd57180b0e517e784ee40bf0509f23b2624780e8971f2b9ccdda9e6559a233fad","first_seen":"2026-09-16T18:49:14.726173Z","last_seen":"2026-09-16T19:29:52.248598Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/759-75d763d13b9ee922.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.081Z","timestamp":1789586944081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/759-75d763d13b9ee922.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJhjM6ChAfg%2FHBaw%2BeXRJo0fgORLL1KhBUAjjqWCxUTa%2BhUJlgmM7bezV5sGHsn8fnhqYecR%2F2TZgNRnK3Yl1CHcrm2SLNcl3NKVeRSZaRArmNeXDNsALu0YDB4i1hC%2Bki8%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247209aa0f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"759-75d763d13b9ee922.js\"\r\ncontent-encoding: br\r\netag: W/\"0e705625a2a55ec443e4565ab4031939\"\r\nlast-modified: Tue, 15 Sep 2026 13:12:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/759-75d763d13b9ee922.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5qjcv-1789584502200-776d5d351edd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":83843,"size_decoded":20512,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e705625a2a55ec443e4565ab4031939","sha1":"c53737403cf92785f191d3792e36f323de329ea7","sha256":"baa14c9b0056222ae1caee5a7182654eeb2912e8842582a7ab14b240b584c922","sha512":"15e801ef255ccde854ce7b0e22c1eead61b490246bf4eecfb6e58a29f86d9d0831bc50b49f0e8b209ed39e84ebbd499bb21c653f0e588c6f0a0bb6392044f318","ssdeep":"768:MwRfTTlTaULO4LILgSC+5z0D9W5ELdFnN42g2IHHMq4YYo8Yn6xCaE9/mJVEE8tp:X8ULO4LIUzK2IYOH9/giTTkfkKPC","tlshash":"b983e79cb18abfdcb52345a87a2fa40cb13f2b80de4e48a0f17da45538184d47a57fd9","first_seen":"2026-09-16T18:49:14.728516Z","last_seen":"2026-09-16T19:29:52.250444Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/media/poppins-latin-500-normal.7777133e.woff2","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.284Z","timestamp":1789586945284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/media/poppins-latin-500-normal.7777133e.woff2 HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/_next/static/css/864b5562689ebf55.css\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3c247281b63f294-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"poppins-latin-500-normal.7777133e.woff2\"\r\netag: \"a09f2fccfee35b7247b08a1a266f0328\"\r\nlast-modified: Tue, 15 Sep 2026 11:03:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/poppins-latin-500-normal.7777133e.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rt62w-1789584503321-b680b4a62e3b\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLrRawryjFEpiesfuM8uXkWkrkQL%2Fv%2BNmTTqtTu0bolmA2W01MTDjCY%2BHw1EYK86huuyQLlflUauIFvptdudqHHfhqWGvdxF%2FRXmiaSDc%2FyQLIHD6WnLhYnChwL0fsq%2BDxU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7748,"size_decoded":8806,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-16T21:55:17.476768Z","times_seen":290132,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/hack.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.318Z","timestamp":1789586945318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/hack.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdK0bi%2F0ZYNLwqnAySOW6m7aEg4plyybTm1BS2OF4JGilJlNfjQMY9eHSdsfR8juxPIlA5%2BAJ23AwUMGzts11AbzquXLsIu2HluXJk8T7v8OVclv2FASIUjoXkD6mCYDJV4%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247284b7ef294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 20328\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"hack.svg\"\r\ncontent-encoding: br\r\netag: W/\"1caf0afb1fda2b53c55d269216497ccd\"\r\nlast-modified: Wed, 16 Sep 2026 13:09:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/hack.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tn87t-1789584503335-de6cbe77a4cd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2450,"size_decoded":2163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1caf0afb1fda2b53c55d269216497ccd","sha1":"6ab14270f6eae1926cd18859279b0b04d2c14a1a","sha256":"fe408dfce1410e747c225c7e32aa4b93622c8115f58727616e3e15253a39efb3","sha512":"ca7ed193eedcc739d426880d22da47d434cedc717ebeef32cfb1959d6b82d047e61cd1c2248719038a088de0d0fb10b9a038fafb6f31b99e708f189e60733c53","ssdeep":"","tlshash":"f75156c5b31522f86602e3f4913e78363b710ed8b522cc66dac92e83ea5145e4da8dc7","first_seen":"2025-07-14T14:17:23.328197Z","last_seen":"2026-09-16T19:29:52.253486Z","times_seen":20,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/css/864b5562689ebf55.css","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.042Z","timestamp":1789586944042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/css/864b5562689ebf55.css HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EI5P9ucrIraHzmEV17%2FD%2BiWCGSTzexZqk6JcC9DuywotzWAC5R16zhNsqPKBi1Y0Fgf8ZdH7m23oXM9eOmXzxsTpDcsDbZlPjzmydVvotenrwFrt3NqFu1VDcD4P7eb4RYY%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=0,i=?0\r\ncf-ray: a3c247205a92f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"864b5562689ebf55.css\"\r\ncontent-encoding: br\r\netag: W/\"81a2f399841264fb509bee4d1be15506\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/css/864b5562689ebf55.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6zv5s-1789584502179-02ef90ddd34c\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76098,"size_decoded":15330,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60144)","md5":"81a2f399841264fb509bee4d1be15506","sha1":"0130b2de60cd7373ebabaa0ae473899478ecc67d","sha256":"2be59654624ca9141f6d384ac1d398cc2ec02f9ed6a22030e62eccffc973bcf0","sha512":"fb53fb1d019aebc87feee66d9a244f99adce8703a66921fa94e70889acb92333234384dca15aa8c610e655c30faa34cf736a1f6ee09403415ce50fa47805adc5","ssdeep":"1536:GHuei+Xo95/Wd5dauL1AmVQO+6CLER9R2FUwT3rFpztCYmI8zl+Ht55uQGRxo:GHVi+Xo95/Wd5dauL1AmVwxxT3rFpztn","tlshash":"1d73946dab1a043f2d27c0f6d294be9c900ab5c0ff3a59e6fe4205114ed27f21da6758","first_seen":"2026-06-27T08:18:19.244634Z","last_seen":"2026-09-16T19:29:52.254419Z","times_seen":7,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/68c0a17d-271d62b721c44097.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.057Z","timestamp":1789586944057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/68c0a17d-271d62b721c44097.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbBCB825h4Tmnp3FdFEOnssFKOAEGqOSv3toZ1oVapkTGSipOtSy3CCBcZxgMKSMgzyl9rJ%2BrYrmauoM7fGHoL4Pu8xhu1zstUJQYJEJu1wrcbjU8rg19SpRw5301RL0jeY%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3c247206a98f294-CPH\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"68c0a17d-271d62b721c44097.js\"\r\netag: W/\"cc2c07fc098753c3477a7a246823a336\"\r\nlast-modified: Tue, 15 Sep 2026 13:12:55 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/68c0a17d-271d62b721c44097.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6zv5s-1789584502196-e2fa85d2c03f\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":684,"size_decoded":1434,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (630)","md5":"cc2c07fc098753c3477a7a246823a336","sha1":"068262705e4660d44c87360030a488290c7ab81e","sha256":"39f8a96ae3c59d4bd7e9ec991b5e4f3e0d925ff0729c22f4ed749a55a90a673c","sha512":"60a40be85b12ecd88a9cb5dbf1ace70d9b8c4dee744bd32f7dcfcd8b6ed8481fbd63c521d0d46007c29d79e4b94eef64982fc16d28479f50d38df55dda7d22e3","ssdeep":"","tlshash":"4401d00bb0c22d88fc9a09f44f73442395b90a4fb4ee94d59e704084619159c4a63c5f","first_seen":"2026-09-16T18:49:14.694572Z","last_seen":"2026-09-16T19:29:52.255405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js?","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.861Z","timestamp":1789586944861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/330e41bb475c/main.js? HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3c247257afdf294-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20850,"size_decoded":10082,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20850), with no line terminators","md5":"d0454876c4de2573f3d0273802d006a7","sha1":"b3919f2282eb47e186c5b0ef80c85759e89dd473","sha256":"de7f9a600bc6717a061480161d0c3ec8f80510e1f4ad5a70ffa7e3e70835b6d0","sha512":"2e623aa9ed1e454d04ccce80497ba0473c4ddbe99b3aa5002fcbe415d6346e311f856190219b7c28a4fe316df4d678a0a24fc0274e196321851adf36530b9883","ssdeep":"384:3XA1AKx8Bt/EqrTTveWSC4MAJDJT3SzhjnRaIsJXficmuFL/5lOvdZuWcMHCGu3:nzK3uTTvm/53S1jnaJXficTLxlrWJo","tlshash":"7192b7c93cd7f55e1b92346b106774dbb53fec98505c8884c52086e8b6a83fd81fae29","first_seen":"2026-09-16T19:25:08.21049Z","last_seen":"2026-09-16T19:29:52.257178Z","times_seen":3,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.7666839782250154:1789585524:4dxN5xn9xdN3C4Vx119WMfveWlrxH6L1YO76no2udFw/a3c2471dda73f294","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.976Z","timestamp":1789586944976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/330e41bb475c/0.7666839782250154:1789585524:4dxN5xn9xdN3C4Vx119WMfveWlrxH6L1YO76no2udFw/a3c2471dda73f294 HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13818\r\nOrigin: https://www.ristek.link\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13818,"data":"FvgREd9d6+V39XVdlev1M0oQGbjRvs5IEIs0afpQVAQBLZzGobpz7Pg7b3WZ4jjyybLSFWqM5d+$7cfL0kWJpaCW4qMIYlCvZnp9saG9v5nh5JfgGcScePFIj3vkOZL7s7YPu+pYFxuIO$+5Pk+8oYwzkiM6tdtXaX4TMHGBQ+YzIg4C94b412ZldW+H2s2cZG++KIyzCDtelstd8WjZlY$uPIZ5GE2o1HG1$w7aJ9dEYH67TrTbOQh$qzNbLt-$r+YcE8+L5ygsyJXO-hH6TXcjKFtHLqHBQW3MedpHuwzD$0J9Zfvk9jiM-yTzt33B5grexOMp58XVWCLWCrhYPg3NDzHzSu6-bs6JOtFrcU1D6HP1QPPW8czay0UnUDLJ4dipOH9AGwWOWQGIxd9C8JlvUdEDwnWdZvChDPXb1vHsD8NKCOvOszEkdj5-Y+l1PGUPbktTKc+psr2u5FYWFKD+n5XJTjHoUr7TDg9oeEcTXK2+OG8yLXY48KVzxvKzZ2JiXFf4G5+L$LFUPVUUIq2STeTOLVSQEVHcPUBREN2igQ9tiMn+S9fF72nwQxuaxjzPcXA9M4j+YVjoISvnQr63rh-0rZ4KlHQ9eUM264Y3XK0t$gA+ZdUjkQekpoAJsQ8kWAzwk6j$wYE$ikeWCxlbykG1GW8W066379GjQN+oFIWXb4k1blU+6pLKTS6AJTM-OjvbFY24B+qeHC54a6XB$U4kzyctzhoTh6Nk4kjOzw3wAy-AG+e-FvOljsEupwd6dc-QWZeid7bZVMfB3XHn-QfArc$Nny485h$A-UsWMdlGvJyj1uJ5xPgsBiq0PovgTfUpA3dZtdvG8UJbA10OM1sKBd7w$LkHW6vcexfpi4oLTAiw2xB77ffYlhJoswQS6$7na8V8pMWHbRplgq9$2uXNcMhRl7nBNxPo3258HwI91OvzxusXjXtcBn1MgL9CZL3MTgMKxcKfrboGynh1Rqflr$MLkXb5wVE0aQW84FkEo4Hel+kVvHLnXGDp4vhY0H8kc1TwC$btIdRIL1TFawPt0p-+p1qzhDLtAeFPp3YCSSkb8M9bLTyftFjsR8-+U$vZa4Is-wzVnl5uJjGdCeRJSZy2oh$+gP7lAn$ZkKIOynTIHalV1Ljj+RJZyqnNjHo0Sq3Ub7WcbCFKGUG-MWSDDAne0sCwvWRUQlZ+IsMpsIpCAAfSt7SO3Zxz12NTJwd7dp1GuElDdWf7rx4+XxIiueq9wvqXGGalFWrkpjFNw5qnaCtK19ZZQozekezs4E+E3shHWg8Zh-ocrcsDk2ABzVwj47ANJBUy91BACFo0+Q5nlrM5WWVIr5fxbB7-CM$w5eTYC6nGY11usDsRsHC54Q5-XA1$y153FPFFdAv6XuAvtg3wQGYxEWnbXRc8bOe08SThtyg$xJWKuI8teQgwdXbOGtPLl-$CIJcE6IW5g2Q563DztCM47DxSBkbRnN-eN1VgAAxkWzHkTKbKQl9Fi+yjRDWLDqh6$1t$$NbniMag46wR+fuxaA5ie$0f54DgonR4RVsQSRNxlQ65qoEO0G2kzl0YBT0$w-1B+HweUgBSffuwwjx728JzMSFKWpCN1t56rK+Uc59z9Y8cBFOrQGVIALuyyG6eKe7xaKzGQ15wSjw7q8FTruRcK3H30D4aglLGDOIdJvT+ABo5ZrdO3EUtleCPl-59KkUqTevjr3iaBTZfnZ14HM8UvlfROcVZkoFEa9IIBgKyqP7DcFpH+LSYCF2qXWTLcy6LilTW9PLyvg1Fz6aLJ7-3SzQcSCAJ$8RBeTRaiR1F7ND8JVVFv9zo9d-q3JJiizdRDkKW-UyqJ2cCxak0qK4YU+q4nxkDP-+KKM3XHOYE3FwUhbM693XC-$K+uD$6MWVi5$vK$uHYsdWRe-ZCZHtzINaU8zdW0rDGkFUC7UbVrk3e4SKknR8nYL0tIav5$++QpZPZMtztcsb1T6B5yu+W-oLMpeeI9YeMWnUtEgc2YoBW1uWgkawOpSPuaTvf8zURzZcGL7vi+FNb6M+Pqi7yvxpVl$p1OiRartqB07fkpvyzLlJY23SkXZcODJNQjWcCWtnyHHjProJ-syYlYTH6eNSpV0s6Mt1+J5jgpp6aG3d3Uwi1hMVyZzt+le$g7uD2BFiJq-d7aVQSPsJ15I4ZGj$3xxS$Bf149R9ci+8qPJU3-yLvie7MiIgj44RdzXcvINGO+SC4-EViUlWYFQEGWsUISHjO1dAhVRILxJhZCajb$tQCnZQUn9srT5Slj9D+RFIXHGBD1zXZyYu2uhCa2pz-v1WJRvRQ2pO6-qYOfi0JwcRi6clyIQkjjwBKhdq5Ej$M352EGZArSH2+kEMPo4IV7l$Jcfc4vtfPDy5FKIgUPGDS69FYgLOnoxqL6E1fl7CfBNBrEpa$af3O3doTzAFePHQT8v-8RWiszf4RlFxGVTjEnMwGRF8V9KV4iP8WgY3fXkrruLA2A03LEDoMfeRdWeQ9ONlnCds59IkhhyYiPPNy7+goGyeha7xysbti98t+VKMkXcyqOcg5p3-vrdU+iVbIEcaYa77ZNYHqne3QIn9-UIWnUN0FoFMF4Ne5AAfY4kzXqfh5LM3BzReeDYn43ARthSR1LxQX85Dnt30q+l6UnQsjD4+KCZ0eZv4YzwFZq$J4zbv0w-QFFOqD20xCW$raLThatlSwGViNwVRbsw1lOCwGbBL3dea$2pIwdAkCs6qs-T2Q4sAjZFqR$kiIvY000fo3szTOnA-yyr5LNQ-qFqX2lkIDc8zcEb2+N4uiGwgesh0HvkbtkDl+VY1ZkzXsICyXdulfx-qrMcO6pKJ45g05BT8nlQO6LhlTyUjY$jznpXS1j+$QN4xw97I-V7Ov96U1so3EhwywMvRGyI-EnEl5EE21DLa-qCxXpZb-ij9X$2NDFVF+ZOcufQuY8JhZEkSoQ2IeD4drMIgHoPigv77gtseOburR$S5QNg25+SBCQ43yxUBlxEihj2sdT82zBAGoKd4729iu$PMhOhcdajo3GhTsvrz9ZY+w1Qd0Kd8oRV2sTNJcgQrZFwLoRvA53YyoDbQCJbKY7uYRfLfXRqO8c4UG9aYU9tZhU0oxuEX6Qusx6JwqkLc9lfbHH97ZswL-VkV8nOarN08sKyPCvUv253i6y6pS8vcUUaw0dnpVGnXrCcioJsy9SF-eHnR9SVSglAzTcNPDTBnyYwKpU5YMQqFPLHHj9FPn9v3AZ5pAYQ13OjFNNqdbAYzPPNKu+u3Y7uN1+geSDKOt-dzV5P+69WWrW$05pkFyGciZk+Y5Cv0XaML3J0d2sL5tx$tZMBA5OJzn-3DZ5hXY7OuGY-EnWHOwfikV-owDwbyFHZOxS$qrGcW3S2K97v5KPXI3Unl$LBuXj06EL71F2hLe8y9UDSpYx07gxTgO+gBkZg9LocrNoc6pJFjhjNN4YcMvkfynyvYlcj-lHFLX4rW0eqsxJIc6o69TQxXFIewOo0WbwyezzgtvaJhS6Pl$zFacCAsVkszSpExysF2dkktljbI2HHXTPjkDu4AphP$p1y0Y1ez0GQByXo2oTyHj5w8whQ7R6uo9Vy78CMrCX0VgWO2UDPgwuIHqpibIvV4qqThFQ0O8JIvgNz5VQQsUw0IZG0DZ$LEN97X347ap1-g7zdaCCV$gZtPaZ0Dduh1TnuD1xSk9qzIO2SLICxdn3UZPp9O0wuNIIP1DV65AFUZDADGjzt0vse09KNJgaFr776bbK+H2LJu5AkptbC5hOr2IVpt7VN2+1vhNQbbazqUaasMPh$c6FCcVnllOGjtnQ9DFbbO0CRcDxRptt1nl916OsqgloCQ8fkBWSEr0YQqFsBYRt+WgSWHTb6hFqFkI-sWK+QtD3bezvaWrvargzMtCN0NfIcDELdpHX-NcfoS00lsdiv8DuHh8Awi2lwdjFyDG8-qJW-Ic0XR0rFUfVQENVzoI6ry7h8cl3hbiC6Zyk108PpTic41YSvqYHzr1DcLf3deeL+QWyu+JkzzIT9TDHqg9dQFngawOZoad9sy-55ZnS2lu208zQUxWlfZd3wMQXI$nhYXxt3OipE8IBhpvjBSR7oMaZUtPrwlhWYAbUM6h40MEBnBEf1Rv7ZGLNIepbAI5RCC62AF7XCrurkld8HgOUZoGg0CiQqdBJUjFeGzBxhGif8qHgG0z4hWul-cGdoJIJgPxjZ8pF+lVPMRp0-2D8adLTl45H4d+t8N2c+GsF-KlKqx$OZIHQHhgHqeUf43q+L5rLcer7UsR-X3+ogZoLONF775WDFHd$9Seactjg7SGoB1LI6CXTJGVKEHWjO34vMFcgpdxCPwe$8aXK1k7wAyOfEBQ282DWhBi-Vda+9HYeDnhvHOonIzcJKE72B$sDXo-xlAYjVB738T+Mha3VCyfHtOGIJlYEYZVh-CvwrECGuWaFEM1GWa363K3opiev5VXaJydr9iHErFHJNNYs9iS8af$XzPv8v5yta44-XiCFIa8wdy+Ow2rA2uxfaTJkhrUPMgatOzBWswyMcjca$ZWHDsrZKe9-iS6A0pyZo54gywj-CkEbTyhU6YsIIR$TM2hdKxX5b9rH+y-QJZdJ-998x33A4nL9a0eG$TTXKgCXoL1-Nqqvo33aFcG0w4qfkWVgsPv+1dLyOVCgjpYG2nhYh3VVwK5S3rtubwdFz0F9gHTO4LOjZvoEpTAstD$I0aGXt$5TjPsSAbVh6NYCgYpeoLw72ZFIxp$uY0s8onsug2VC+lq5kAyIJx3o3l3NtDfs9pIUV8R9O4OQx4iLbFnqKLAsyzyqivzGu9BxN9sqsYKjl5BzteSqwYDxEE1wD2lIilTn$x70Y9eilc$UZjtc5EgjNRcSXWq+CkevCBZ6gVTR-NDwtaZHGR4g5EXa2IjVsQHkibHyTr8foHVQW1u7eSHDrw8bNb1+rJkBGfI30Swq7PJ0H2s$N2kp6WVJCU1tQs0z-0C-lKACjnBlJ8p$iQePr1qghLezvZZ$PbR3ostRIDJBVSB78ZBk5V4MrBuI-zfbIyFn4JWaTN3fkcLIjc9bcd7Fl$f-5jSEfOKegnyVxTNrXbGdau7-iyb1-+IliMxXUZVegwMM4PpjEIUzbTzcokbwOcTXr606a6aovzqD67TY1DXOvDhZsG$B9NFyN8PyKOivnb+JswwYE$Scy+zehCfQl8Del0Raack9SJ6TevcyrqY8JfeP13RbXKVMPRRYwvpf3+zgUXZ60Q4bzw7JnJqZgpd3SB41Lzl-HB77hYfDcw5lIoXYcgbqe5oald5i0AKVn3aMLIndtLTvieJoNwEodVXfQhCkxsdVlS83rxN5S-8xeZdoVRyRN+P$XXWWNlcl58u5kIoe5577Wa3OBh3ec-hYJ0tNd+t-XX5FtlY6pQo8uVOfEpQW1IETXq8xzVL+TIk336LS5HwPStTXKEnQ1QQUA$dMx4j$arDi4iw1W57sUn+NGv8fQAbTcO4NlSNYUXT$TXriCGYsBW22ulSkrjQ0RWMaJxOIvNWIkwMYKnSy0VAksx6NuHQs$bJusA$tHjC5Ys0JhRxsl$qqSVQ9BnbV8RtK+gb82bww+nCQpBtlZqVOwGAZPh2UPS54wKxkysZg$pcoDvK8OTS9Mhch2KkV0xGRZpN7WwKZzk+H0+rEHn04G1iizxwr6OGUo2aJDow5zbyJSIPP9-8s7N5ktZ0w$rCDDIDeXD33sOEMSv9AGytlDpy8XfNC6CggWVDsx37GbuNFhuG4iaAy$9F1QBeAk8ArCkiZJwub5JiSaovvDgegkVT1R26gRNH$U$NWdg7WiuEv8AR2wytYBi0CH3KEgMoxBEEIIaepCe9IKjjKtpDqSL+HJCj4pAGHGOXnc-0vCAgAid-jUXXIwTEZ3b8FZ+Gwa5tx3d9A$-pKODyYloRfFqPsfcBjCikD6C44C+XlC5tjIC9MUMjVjaPpGz-I8Pw3$keto$MDOYXcg+FfLcXk9oF8q7IcFv4uIho$jJu8jJBhXcr3FDoXjzCghFG42jFKqkhO7s0v8RKUU2TkrAUAO9x6rF1tYgdknNqHOX3M14b9wGc1BTPYRPusC2NA65ho9GNeTQUncRg15F$PM8dStd83dp5saG8g65C0ebPhPeHAwdCP7lrt60xaM+zKhEww+aF6GnPPt5+vjgki$G$qL2uORNoFT3eA4Iy095H7UTurU1XUpJfIwNPeCDPiRsiJKfCdIUAnudiNpDsilSycLbJPjg5F0SUTDUDD$bhpRC-TtH0BSGUAYYT5LBlktUlPZDpdiE2ub1DGgU2zA2y9Ah8Triu7YW1PDsl9cD7thVoPlbWy6EvMQZZedChi7oaUHInnwKegLRUqG1tppQC4vUySaIrwCSt8YMSp$Axx$hBtti9oWSE6gS59fBkn6hsfGnn+s6WXLseZE17Dvv8glTsp1dGPqelOI2Sb5WUuxzY-3-kfoj+GI2YEEIsvWOttZ6TwDPinS$ewq0AR$6qWIlnS008RNiDZTPHZlC6W3IErRtoM-B9xLGTA5WCLDrcfTRkgBbk$FlcclLbNY+wMg7aTus3YXUdh11DxdYJjPATX0-dx4q68ZkYFMhWe3ZsCFwBzKf6de8nu1-v0DsTpJRH2K05u5K8kVvGgTJJDvYFXetBI+6GqnTkHj-KNAqrtTOx-CLcOktUyNCF5UZU1eo7avxETdi$Aef9KTuyqAl+BeMS0IWpY492Tc18jgiIeUT7buQuVp4EIRbHEX4WE2f5brWXUPzMVeLNqGFR0Vuirr3-z2KSliwMkJ19hdIYvIxpGUE-TNou0F$qUU+SG0XVY1LWDqQcPUrL3cg$Ko1U1cAoDOerFQcos6EtKL$JkgF3-EQJhXg4ypUA+8VPMRRazfh3vn6Ib30lZAP$8hMiMPu$4gA-drj68S1rxXCLG9i7StSRsf8V63jwX$ItrY5zIKACKhUlzOR6VHCORqhXRrCu1rsRP-LrL2LcUCWzLGip77lQ0SxQ2Kcx6ykRiavit$0jqRc-Nwl$GKPLR95X63qr-sTT4lz+S9V6leNqzO3ZWQCTITx6r3xeYWV+grZVJpeyGUtApTTBR$6pb4GR4055+DhnVM1rY7nd2WCrAehO3SPRTKStk7ttuUQAIQnUq8Y7Bgr2Vr+$jaDx9SbPywDOB0wlZGIbrMjG0QRBWFyObooyBMLX$3-fV8xaxBdVJyphxjlYZoB3$xCs76HUk6eIVbM4hjv9IG+PvJpCuENeznB1ZegN5orbbVeW7H46tA6pv-eLahGVc7IJUbwGyN1Pagj3h1ebyyDvaMDJNI1Hf$CZdECtdHyIyWVbAN-XOCjd+$2x8Y3GoQUi9nOhcNN2IIea820iYlIr8yP-zLSxzgZWBbjVK4EeL8WnVQRj1arn9VSjkb-HBYuO9N8Qo14DjTjgUDCarMBynwsuvZgR$0+xBbJClcIe9Kz44Kh9M+9cn1bV71eG3QPyg59Zj7a+l6al+U4r+90XODdJT4Rdv3BDj7wX302M1jCXtL3I$heS7nqYStcQc0$ulhuev+Ej93+rPegkh7-FKOKWyw$tL6Kp$K3RDQldx3fQt4FeZPA-XQlW7G756CgRV+5Y2uw3W2zC03dnXkJYp+j-C8$oF+k00N5dARuxek-heAaC4n+A$+L9eTjkuNNAB$yCa0NdaBs$MU6rZ3duhLJP623Ctl2a0aUSYzQWqnn1PkDykfynS7MeRCczuf+O4Hzg0B+6NNKqkR5d$lMY9ekUshNarnP8TKw6BqbDP7nQpWv8y-OLWyaiqw5FloMpgx7QkIp1Gsl5izJa-FBLHSbU6o$Cpq9dlNq5Ab$VxCIe0GTo$3bZWef7vDpaxN20aY3NnR8r2A-$aTh3+JTPNoQ80nsDaJ2NW49IU8j4MVJ+Sne-rBhd7F42Hs4V0dlZQj3D70AL1cuoNQQEFvjiDvOWol3tSChTgASAqbXJw9BiBA1xZ4c2Cen$0e--Z9ONOvK5-EvpW1x5oiRr$BN$atK2kjULC0BKnQMKfib7pfCU5TG3IhH2SYqnBk1NXAsYe0FVssAruugqP6YSkSL358K6h7za75JGl3PDI0oZwLUHKBTcWuURs4g7xlng2wjaSRjtVMdwcYfkswI4xKBnjNzpIJ6inhv7JYFjhe3IJi38-x+SlXhE6aQoZGI+i-BT5NUXaTV93s-G0FXcRqMbdQ$awZhVtMejVICsPrkcIq7he+VLJc+W5wY0sS1zJME83A0LWAArb5szZ8ABkDv8Bvb9oGG3DaZH8Y$8qDpRpPls79de9O$T-Ofje63iDbZ$oAbC8GZi1k03p$JY5kCixZOvVgj$rzeo9TFa5b3gnrsBMUqjVntXOPhxX0Ogea2vB2yxsqUTMksUxU6FSi1sZvrpknCSJ7EWggkE7lFJrOLU89ntkVtTH1YjPDLLQFAzdqiApZlRjL72DkP6d86MscV7-w+Tjfw0FwSXUIyH1AHX+4-iPLpNA828DnX1$IA$gs3GkBvqjNBHg3Ih1NrQudrGLNQnRIoxI-axoIqFi6yNVBMlX+ilMiqGKMkDwEF$Ykx7ckM4aCt594Oj7PRRMapAP5$8Z9AOObQKKKeUC2$hwbcO3x6IVUUSEzGxDNt1$r2JrgYEn$AZCzE3wE$FUI9ce+1BxgbqABWQ3oFLxHH4M7c4rpiW46xWK8b46tla3oJtYYo-pfoLPAydnuadz-xfkbjo7O2pIkVlINlloGUZ3aaI2hQ9xCfnBS$I-qqVvruf5BGw2eEWSt5YrWe3F8CghSrqc6HnG5y6E$JYP99SeAMDAgCXAENJ2Ls71nC-xPaOAqqb61vKKVZQigNPiHt8vwhkqxdV49XwQ-aWggqBpcYFhK58PvMq2USKGuwSwgwd+6PyiNEp8lHPwJX+bafjAvtZ$Ga+Bhw3xyPsWRkPFI1j1XDiBKTKQ84RBPceLXbLQXP4U61$lVZwVD5SCy-3YHRh71UvYq3PATKXiwedrr42DInwW72r7SEPgtDLzPb5Jw5ckTHqagnUxiY09pXrRENlSqt3eQXoUzk$CfBCSZibgHILJNZyf9QsGUSDbsyuoPwGhLxsHqhjjuV1pIQzLXh-QKD+zpMc8BK5Yq$i+CJAULng7eDV6EwMhLDc6LpNYl-DGf4a8$-pRcf7pzoeMzo$OhMK+wewbioRc609fX+0EYoY3dPSjqPAPX1zYDfFxLtUJoJ+FQR9gHP0nUiMVMevnbabjuOIoDrASPCS-agO0z6V$cvoBCUdnDC9bUU$vIcvA6PhrqAiAtDO9PFDWK9iv$yhH7n$yHcforq6XIkN4bHyLcK-7oE4MWSB93iFlfBo$YEwEXVE0GkeVAM4N5n8eDqoFXIy4zdMizw-LSvq33fqMePVOuR00hS7ynTd7hjR44ycdfqn2l$gsx0x1Zjp3DqHBir6lBiaaeio4hIGr7O$X2po+KJj-LW6wIatu$hpSKk3xtJWzN6kd4hbfTRFEi642FcDT6liqeyJuoocDQZLdjYFWF1y+8VEok8i9HJ7LJJJgUkoig0UeTT53wjK+$A1iyXKZfRa2$CjI9F5w1PpaL-AdjLN6rBXcdPh9HVkdBkjgAYp8yHV65Zc9Ztnle$XOgpVVSCxPoX30UeOzhb7FT7B8nZuUhUeCl0JkkDopoM62ytz-C0pd54lhzdGijda9g2Kn8KkG5Uv56Ul9GL-397A4wjCql9SFIO0lbWH5yMjAy0oDSSCMLoaM9rLSj5w$N3lRr92kBISoZheJoR+v8Yu3JYXP3dMaujhwSauU3gA2nkKQ8wndPwReNF5aMFMODu2C5XBDpcNuB4uH1B7fQbvZT4c3STtDWIw2bDhwuhRidYEUDE34hikg8HZDvzISTFb2s39saWlQGwZk-e8dOzZ7o+PQ09NbzI4VVt-gnsIDMDURpn5hhRbHKxCfWga48Uek07cdujqE-Yp4CJ5+ZUIUgITyc$H$CRA0lqxh7VdVVbjd7WcnP3$VVgsVc0lDAFR3LZAxwZWRhaYWqwxYMU1s$jaNC47ZX-6OrQe+0HP04AWltd7OLbc8W4vEzwQrqMTGKWB$B+9pACIF4Ds0Jb-rqDpUz7h+ZQQO5l$MwyfpiFWpBwMagQdGyXjuosup8eXQYh44lygMSUKuxxBQbLrKGsgYZHhKP2JuZWPJK-lnzLAY74pZKONlwzTUaO3CrEJZVFh29ApfjByJn3V4ux-GwtH-WqsqAnkVGoBHriB-945fWuu-rhY3PDvA9vwxNtuCCw5Ts9T5Rp2C5R7qeHTouX8LnzWFH5aWM9+CI6-y13$k1Gg5jYs6KZSljxUFEMMDkRz1pnV$qWFC0EysySxBPkBFJooXnErHZyCh8g6AbHXaLpyplWT01vPfaIGpTbBM+DX0R3onb$KZuLGe+3lOgEAyCxFrO4IrLa9FC502DFelcTdaEbfjeOk9hpDt-03d+35LL3n$ZTHLHT+hDEuApnRfQ5xd-HljKiYetwLAQDd$dZH462nC4rN8le4lGPNaJKTq7Dab1IU5xREHMwC1B1KJv-Hnd-zi8tRhM+jycunTAPYbBaYvR4AhCNPH15rfnGwKnrWSU87$R-8IoSBVg1rpy8BU3cf9+K3IFZPXx35yDF1jc1g52A3GWrD0s1rhPz4xp0xqDq60de5ITWnBEFJI-AQ-KlWdyaUCp$5RNjWjB1R0EB6pYzpnp6WeOPN-Now9J4ZnWTMoaVeBAIKMeXBUic7JPnoFC2cheM2AsEsarX5rfhRUi4BJi0r4Iv4nSt78RzBEaKLS2NjeVAbxWUDkAEgFZK$FfJ8yQVINkBBd4ghz$LdqRP6GFu38hqs+KLskOnJuFT3oPqWyZbkohlvurzof5v9NZ4HpV3rDEprXqktgu1QKeX93fGBe0yOA-9fStf-$wcTMoTMwL5tfj4V1W9$3JB8CBQRY5TCV$4x3z1eSkp20Qa5USsclTJu5lMH61+8rh8RqYPbC3BqUnyH3K-Qczlnu9$GcTlxfapWF6VkZCHaAz8E$UnXjgx40WhhSBOBqqVWZUzcc6Q0ObBGSb3+uTpCI1-LbihTF9qEKv2S97MW3unOJ2hygMvgWFv4d6CHs-GWX6zuSUDYuQEpW-ro60EZzW6Xa+Yww5ha+SPwvPjsL4$X9G2kx5vq0rjAb6sVd6FbQxOoZJcLGJz6Lpin563tQiSNs-F17wMd-9Nqdq9LfBjqXq$9H5xrav6v0NDYUxvuiWukR8jUHRlJcsKaBunfE01pnwYGfG3PZSVS0pdZMlhCJqFiS+dyHTWGw8QOtXBhLNbQHdTPkfHg$QZZYtFMPU1lq3tVK1gVEXr+Y4qB0AJh64$uCBNWzwVofzMBLo0l24CXZG+sY-luElRk1F$X02+1oI8MdX9iGUVUjfvx2bIj-o-Htux+chYzq9RvP-C$FP+k1CT0FOixPtLoLiUFh0MYY5LSDvreAyiU7rUxH8Q4VYawO0LjtgxXdkvDxPXnzWVu6y1ZAFE71$it7n05oVPZQdbPs1x3iNeKyuagHWeaYu23KX-iX10UPH71A52rzPen0H56anX4gaxCUAr+tlw6N+l$X4P-OihXrlI+Ou7+w4fcAheC6cB5z8CTfzyhoJHWZXky5W-xc1LpLGqV3z50GrshY9vJJDvCSeBVzfy-K6WrPusHBae4y3y3+AtTBOnqy4MziW6lgVKyFdx0OkIpcLXzqaKGIHLv7gDvdwp43Lx8+n+D0CUDP4C2g2B$dU76sUaoXeSx8P237ZYgJ-Y9cMVa$NA5bon4OiS6W$qGXsUUehI23UnE$NKhDZyC6Pnp8$eoY1gJwht-3NPj-Ex+g$Op7KQtOPqPE4+SHjxzT8ejXZX6wH6FSS$+DnkiDRyB8FL55okBo9Jp6RPyYYYz-QPjhFAB+PbIU-62DgB0U4T6isZU0lW3cYY3ZG36QbRljxky5KRgDNCT+GDN59HyakTTDS9$WuQApZMw1dBYnWNCdu3+xE0-fCpo-4vqAy9Q25QHvZSQES-pJSBl40r3FDc4PLdrfylNiMpjZCcPwvslVqqzXRBpqaasl128rHj8l4X+9hbrg-nOiRGrOlxtXhgziJtIU6xPodthao8EfIjNIIcXIqn59X31S6vBQ77VtyO8IKlnhY5kULten$uyfeEv1jParMgE8B$sCp$A0EWeeoAkgg0ehMBRT3OSZUVWyS-kPTaaxJT4H2G+Gg+cYg1CUa914l4SSEMgs5gwsFJJ9aPT-Kd$N+ni2oSCv-MJ4uY1vD9rSpWsPG9gKO6twhUV2YiQkwxMQKQriAxTS81poi3s348DO3hOo4zeQPJX1Mi6TVXI3Glp-h2XRYwNI$SUBy8BcTf9hKMJeIzCb1DMpZ39p9ENAtP9$owjEAyNFncDlh8BTEcynOEQ3CWoo6FRcGJQptKUibPRkghZNzT1SS9DTYdNJMDJ4uOMxl4wofFvvxNhg+pN7OvR8FZU2xoIEfwPLR6Z0d9JznDODNNOwIXYog9IDT-5Ec3$rwNDbH1KNgzQ5WYSlQzX89SxQX+aMRHHiH62C$aC0iBIDF03Rn03KszD1VFCP$f76Lfqay2tfF4SIO7UktSPGCeKyyoll3q7B-uLbVWVcIrzGJD$6a7bGUJrVY1M73vJYuUCi8ngO9J+71i74kKehpk-nG7Nehebxx+GA$cEzIee7ocUMav9RZt50hvMD3MwYdC0zMlYXidDSi9PEsGg-ldFpjlYUNoOO9zvlX$4U-Q$CiU8+78a0Sl6jhON0qXtHQ8q4+ie-PfrNvDgEIanXSsHBzO2lsE6lsVVT1G-CtErM64k7Hf2lDVYLi3yg3sY5vrH70CoQngJZVfcp3GCqsKZ8ZJ-W7nUDzjRWw-SxZNizxYKQQzoN3QFjCf0tQBZKWXCM+NyNrsurToivxZkMrlKqBHL66w0wstlOTNO4IY3VORnfoz+NRwU0N1+V$TazZKOU5aGOi6t96Dye2dAOjpolY+ln6e8YFn4-2$FgYlqIJIiBDP0kwlLoOQ6Ss$wVLysI1+kK01Xh-9JfsWAdXrTK1Dr1nxe7$XaMn6kXf-VrInBvTGNbXNIOq7+pU5wzsiaDvUCdl7l4d3ygr0DbVgkwuXpirXQthIZPM7SdksCuM5$bBavZMbsccoItS5jxsNu9PBJKXcwLv-PSt$06WPSk$xgkytoW7NJWEpDJY-bKg2U-7qYsj$Sf-$MX4u1X3RAOFH0t6VgZrIDwHX4Q9Ybx+HrryATYePBG1H2FU$Kg8wsizT7xgx12KPuY7TUbxpQeRrnQMo9PP68hTN2C3EpMDL$UgXrTOPv9WhpUHJDAkXBcKMrjEux2tMQhIKVxpRaD8Ohqu1kN7A2LI++3C6U3oRJjJPXKW4BJkJIOk1htdKG5guOvhniueytcEgpG0T8K0fBX31BDIXxrpgH+JeFBjoxT$nXTs9ngcjEP8cKIzWRQzhzWd1fx3UZ0L8+p+9kSb-X2qrD$zudQ8wullHQthXnAhVKH8$ubM+3MBYVZZGBPvOwLJTXWiWXQnza+pReno3CT5rFo7B7x2Kp86PpwBsWwujFVjy0KVRoThJOy6ObgkiB6ooVBabvKKNIAdtxnk7ysoVVhsHvSww5r3VuJqxCTboX8AZvLHQz+q6tx2hvv+-Fqbh8iRyfSgp6$$TRcYQ89$7x9$qyt3X0+qQjDiDV+PUXy3550vMqIwFQiqyX$DNwr4H29wwwjt-lI6aE5+cBrOF9Hkf$XRJ8ouvRivJFv9Bq$AFBlRRGs65bJnP+UCV4vVwqM83MeI3l4q"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: V+s1gk94wROvjLJCi/mN635snF3Fi3/FuViy6ipgGbxlUNEwhoUR7KZA0j4ZhqKYZWwnxgM+W6Zw50+bM76QClmlYVcvTQTzHeO91Q37I+6sPB689bTjwBxdqAemcI76FbdirYIgN/TA+FULf32lT3ZluQ1LcGBa8t8Xgzeyeiu0bS117yN7HHGvXSbGHYh71xKFTMu5+r0N/GnIjhPGOipAHCGcY9RMonFvxf1R0PtFUhQeVqXeh2JXLvUFyIlt386FMeHSZqu2aUKwFdp8lQ==$/ngR/+4K+A0UCoF8Kw1BYw==\r\nset-cookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ristek.link; Expires=Thu, 16 Sep 2027 19:29:05 GMT\r\ntiming-allow-origin: https://www.ristek.link\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a3c247262b07f294-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":[{"name":"cf_clearance","value":"CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk","quoted":false,"path":"/","domain":"ristek.link","expires":"2027-09-16T19:29:05Z","raw_expires":"Thu, 16 Sep 2027 19:29:05 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ristek.link; Expires=Thu, 16 Sep 2027 19:29:05 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15706,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T21:51:44.748211Z","times_seen":18502920,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/icons/facebook.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.324Z","timestamp":1789586945324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/icons/facebook.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tblVN%2BdpPIwCurZ5nApDbI7TITBvIcFRNKlG8WmbbABF9KFM2oxzuPUTxGdi51On3Bxhef4aKyWpf8Rcadt9e3G1v2JwU3vxjr%2F%2FFl%2BDcnC1V0Ddlrt0rXpJ391kLJkAU6o%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3c247285b82f294-CPH\r\ncf-cache-status: REVALIDATED\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 495975\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"facebook.svg\"\r\netag: W/\"a81cc3b6af5809b97475f138d500aea5\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /images/icons/facebook.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bv4x6-1789584503350-94447ee58229\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":893,"size_decoded":1513,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a81cc3b6af5809b97475f138d500aea5","sha1":"c5b05b73384c342023f718879fd2f9dae9048b72","sha256":"657e6df719bf41e6b322bede09ebb86ed6869313b9abffcf9ebc10b2df8e0c63","sha512":"fbcb6a912072ecd358304039041f04aaff36bb8c5da2387a315d8d2eb02364321fcd66c338538f749f1c4e148036c82dfcc3b8bd4f5670fbcd9d381dd43ceae2","ssdeep":"","tlshash":"1511c0d863c6f9d4e82e8bf0583e56b1a75430b53d30c25c8587ae72fa022fd5690d94","first_seen":"2025-07-14T14:17:23.33272Z","last_seen":"2026-09-16T19:29:52.264904Z","times_seen":20,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/pages/_app-869c83ff3b6ab97e.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.052Z","timestamp":1789586944052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-869c83ff3b6ab97e.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FxG13ucOpuRNPaw98NbPWtFPFGNdWkwjIAhIT9eIsZGLWde1WwjaUQEnOeHgcTnwuCoMmhMhznQk6DJ956kp91HaHO9HXt8HHG0VOWMEfNXj5Sl5QzTuqY6t4gMPr4zva4%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247206a96f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_app-869c83ff3b6ab97e.js\"\r\ncontent-encoding: br\r\netag: W/\"cd469b734eb6f2b3f1f85b31c4f2837a\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/pages/_app-869c83ff3b6ab97e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z8sfx-1789584502185-959fc5f66fd2\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2670827,"size_decoded":1477773,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"012751a52ed88ccbcb4191f1e05d3a05","sha1":"57e189aed452e094f7e180c2c60dda77ad15be28","sha256":"de0ff6de942b3ad9f47c3aa037f6b5cc728d44a3f54e431cffbf321908ad227a","sha512":"a649f0bad1038dc47293923bf8b2b963053ed3341c87409432f4eb495ea25cc61ace3c724ce6c40afbc1c901513573c9264deaaa8df889c3d79b9aafc4c66a5f","ssdeep":"12288:O2Q4RIA04bU6Nf/FnhcwzlLqLlOHVu7f0gN/rhck4T7+Up+OMgbD:OORIAXftrzlLqLlQVuJ/72NPMg3","tlshash":"03255cd972d5b03143d360b8507f110af33b1a6a640d84a8f269d8ea3db994e9237f7d","first_seen":"2026-06-27T08:18:19.227383Z","last_seen":"2026-09-16T19:29:52.265659Z","times_seen":7,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/pages/index-4587a20e67567815.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.092Z","timestamp":1789586944092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-4587a20e67567815.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VANFGYskaaJVgVS1qM9Q6JRpXGV0E%2Bl1I5XGY%2F93ytg8gbyfvjLsjhjh8shSbiH1wA7incUValS2yCeqdJ%2FcdDN%2F0Nhsl4s0FXhMlK4gZr6g2OtqFf5TdCs1hvppjduyVaY%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c24720aaa2f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index-4587a20e67567815.js\"\r\ncontent-encoding: br\r\netag: W/\"cc6057908eddfa3bd67e7939c44ae842\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/pages/index-4587a20e67567815.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvw8t-1789584502198-8b6d71455545\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48485,"size_decoded":14717,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48434)","md5":"cc6057908eddfa3bd67e7939c44ae842","sha1":"f1ec9a2b0322460ce9dcc3caea7eceec1e60b0f2","sha256":"ed098cccf1024aa662fe23c0b6fdb25e70e8e76b2a0bdbbe4516d9035425e851","sha512":"377db68cf1e866b29ad77b8380796316ba7248aa4bc0680116b367d5973f2ea95cbe3d042bf071bf02ddee4a404819afe17e004a18318968f102fc5c10967979","ssdeep":"768:wA8s/uun+n+U5JU5J+++bzAl8p0aOPRSYdL/CllTT99jkjyK67wqJruGrCIQ2BHb:j8hclXSa/SnkqJrhWx06+hEo6X8","tlshash":"aa2309d97699bad8f51757bc40afa00db23f3aa4e51e8864b56cb814380f4c4b60bfc5","first_seen":"2026-09-16T18:49:14.64894Z","last_seen":"2026-09-16T19:29:52.266528Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/api/auth","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.828Z","timestamp":1789586944828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /api/auth HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nsentry-trace: 160900165e5b4ed8b226409c5ad61291-995aa35064a334c2-1\r\nbaggage: sentry-environment=production,sentry-release=cfc34059c51981f3297e57cf85c2bce3da9f5c20,sentry-public_key=44e63993932841f1a2a7a2c4e4faa1a9,sentry-trace_id=160900165e5b4ed8b226409c5ad61291,sentry-sample_rate=1,sentry-transaction=%2F,sentry-sampled=true\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247253afaf294-CPH\r\ncf-cache-status: DYNAMIC\r\nage: 0\r\ncache-control: no-store, max-age=0\r\netag: \"22-n01DGNAD5U7en/eay7drg8VfqHo\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /api/auth\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::mdds5-1789586944916-a9a741d59206\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWHq2kh%2F3I30DOn18Piq1Jb%2FgUwgwGKSVXU7fs%2BVmu%2FczUqsVlsaAdgaGUi7ohXjw6pJJhT5JPyXLTJ5id9NF5YJtnLq69mibJHAoNx0sr2KlY8qv0wdTwFj4uyxE4qslVQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34,"size_decoded":866,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e13a55db81e4610215761b8d99e2bb4d","sha1":"9f4d4318d003e54ede9ff79acbb76b83c55fa87a","sha256":"cf796828851a31ab91d29ec5e8a4eda74388f8e2e3f857939b04840277e9eef8","sha512":"f79c84808c5fbfc0b9e79245c248988ee250942a7fea3e397fe5396f974336d45b4a24a79b31d987a0f975a8a6129ff4f6e299b3491359503eb6095b4c4f30ab","ssdeep":"","tlshash":"ca80040100013c354703c1017c7134455004d1d00045f4c5054d5005130451130537c3","first_seen":"2025-07-14T14:17:23.343144Z","last_seen":"2026-09-16T19:29:52.26786Z","times_seen":20,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/NewTagline.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.314Z","timestamp":1789586945314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/NewTagline.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3qPZTVd%2Bj7vJObvFHglI1ZMdgknqgbZpPwL6LQlixDUtMjHu93CrCRozCZu5A6E3byXNcr3nKV%2FaukOFEguXkllfccCea2YWa91gEa%2F2iRKjr2n1kVTEaNMhS28mGdfep0%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247284b7cf294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 495975\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"NewTagline.svg\"\r\ncontent-encoding: br\r\netag: W/\"3e2b6c6512778cda264dc5d0be6df901\"\r\nlast-modified: Fri, 11 Sep 2026 01:02:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/NewTagline.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qpcwq-1789584503344-c18093422595\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15331,"size_decoded":6253,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e2b6c6512778cda264dc5d0be6df901","sha1":"9ef898df874f32f5ba66965ff15816701e1d9477","sha256":"03bea75fe13f5415ecc1d0982a4b6170a836d15a5d6c40e5a1e38111e5646584","sha512":"0f9ec655a1a03f69629fbade6a227304c7e95a2662a50e4af67105451a68cac3bcbdb81155fe45d6b5ffe32a6a73d2d6f54e00f0f24ea1d65b2b7104621e9db3","ssdeep":"384:C3aEqIAiBGS2EztHfy2ebKh6PEq7c0DDC:YBGaq1c0DDC","tlshash":"df62a6cd737426e4f801a7e8ea534824754fc8faaf92cb93d251ad9d3690c4c186c6e7","first_seen":"2026-06-27T08:18:19.229784Z","last_seen":"2026-09-16T19:29:52.268676Z","times_seen":7,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/ee8b1517-b74222eca28dfa3b.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.065Z","timestamp":1789586944065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/ee8b1517-b74222eca28dfa3b.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNu3jRans%2Fo2xHIQrdLMpL6Ci0Ja0zyay4oL5A3TGhpPbzKH6Rg%2BFubnY4a0qWK168hXTN0qwWvYhmTwyhjaHp0LUUJY6e%2BMpNuCHxuGGNUpstqTy4gNJAQHK5IHpiCLvjY%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247207a9af294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"ee8b1517-b74222eca28dfa3b.js\"\r\ncontent-encoding: br\r\netag: W/\"76b8758630d772d94618d15e41563180\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/ee8b1517-b74222eca28dfa3b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m4dvw-1789584502201-f9b23d2d5381\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":128135,"size_decoded":45118,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"76b8758630d772d94618d15e41563180","sha1":"a36f190f58920e25308ad1a61d28217da9a0b0a4","sha256":"68991dde04bfe391977e35d5b5007df6cf3419f5d87028fb5f2eb847add2d3a0","sha512":"58b5f4766bbf6106e58b3e1a71599fe4d654b73c046619e0f06288d6cd764490f4d998f6a8a90124ac59ad0280a5497a9359d673a11588e618792e0d590330ad","ssdeep":"3072:hdQFh/G2eAD2sY7d/vDSgMB0TplcedRlZAsSA+Gw0V7H2VcEjxsRH6WIE5:hdQFh/G2eAD2s8d/bSZB0TplcedRlZAm","tlshash":"e0c3f7d63342b02282d255da543a0506e33676483647c8acf6bc5ddf6c6a98b71fbf38","first_seen":"2026-09-16T18:49:14.699912Z","last_seen":"2026-09-16T19:29:52.269657Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/I_fY_kqwpcLpGeozTlcUR/_ssgManifest.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.099Z","timestamp":1789586944099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/I_fY_kqwpcLpGeozTlcUR/_ssgManifest.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8kmCTiSv3dUAmtboES8SzihzF8kheGwbp7ybb%2FwHFYhl4Oz8pY0K4I0Xs8zcmO%2Fe0ate2%2FnD4FhPeYlQ0CU3IirufsetI48nPWUtd2qYfGucUMCo0cTTWFuQKHshdH3fzc%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3c24720aaaaf294-CPH\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\netag: W/\"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/I_fY_kqwpcLpGeozTlcUR/_ssgManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qfj7z-1789584502198-7d402c910841\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":1084,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-09-16T21:48:32.914375Z","times_seen":260575,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/media/poppins-latin-700-normal.9a881e2a.woff2","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.286Z","timestamp":1789586945286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/media/poppins-latin-700-normal.9a881e2a.woff2 HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/_next/static/css/864b5562689ebf55.css\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3c247281b73f294-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"poppins-latin-700-normal.9a881e2a.woff2\"\r\netag: \"25b0e113ca7cce3770d542736db26368\"\r\nlast-modified: Tue, 15 Sep 2026 11:03:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/poppins-latin-700-normal.9a881e2a.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6sv9m-1789584503318-36f8111ff4fa\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWVg3KKkTls1kRB3vAyAfW5yi%2FT5vz8NicORnm4Itqr0CModF0w%2BAyEDwh89t13RM37YD52ULeyU%2BJdXyeyqAJCnQlk1Gw5UU0RHF4iXquTH4KfTQyP7P%2F6tItUkjPKKqOU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7816,"size_decoded":8870,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-16T21:55:17.466511Z","times_seen":312203,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/images/url-shortener/customization.svg","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.303Z","timestamp":1789586945303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /images/url-shortener/customization.svg HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjvDcsDsJnut8Zr2br7EWLN516twfzQhUp2foJ4%2BgtqGWcx%2FsD5I2JPfJcI9Vpw%2FLeMI94lnRyCKARvCCa%2F4hrxqTCJYzAkuQ5sQy2MpOl4r9kjLGZL686yJygGLKVu3uXU%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3c247283b78f294-CPH\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\nage: 134\r\ncache-control: public, max-age=28800, must-revalidate\r\ncontent-disposition: inline; filename=\"customization.svg\"\r\ncontent-encoding: br\r\netag: W/\"34f977c5d58ceec9afac106cb2649ea5\"\r\nlast-modified: Wed, 16 Sep 2026 18:46:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /images/url-shortener/customization.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::srgs4-1789584503329-d6ea7d26f1d1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16482,"size_decoded":5362,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34f977c5d58ceec9afac106cb2649ea5","sha1":"703a2a9cb22e8d37abe7f1827637f69461c2cb4a","sha256":"4104a0d1a68f0b2fd6f1adc357ed493e10bf98df477d7b19e68d5fcb277cba54","sha512":"186048c5faaabab84b557184726b1ab80c50def531c42b7d7b698d8e746060825e4b800275440875ec704434b3d9c5bbfe7d80b5201e9117d7a3002fc1dc4dd8","ssdeep":"192:8JY3LzYAiDunii04oLGg06752BWWOBAp/lqg27qD8UlxMxU0igJIRvlT9Tx6N0lK:8JYncDunB47529KUxhJxi0l0E0t","tlshash":"d272f9a8b19593dde151b3f9fb266820a76b72f9f684c124ce6d1e0924224c7cc1fdd1","first_seen":"2026-09-16T18:49:14.676698Z","last_seen":"2026-09-16T19:29:52.273734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ristek.link/","fqdn":"ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:29:03.440Z","timestamp":1789586943440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 16 Sep 2026 19:29:03 GMT\r\nlocation: https://www.ristek.link/\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::65cks-1789586943598-67d169035522\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwkcTbpxPUx4WbEGAgEYmkblXNA6IwvCHv%2FmcsKNY%2FRdEAw%2BhJtRG5hSGZiR1qgD2anDET1uOMqHgumGu%2BQbdJ4BLh3elIYmcE8DKtcCz9%2BoCNqH9QsqnJ77%2B37I7g%3D%3D\"}]}\r\npriority: u=0,i\r\ncf-ray: a3c2471d0a66f294-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T21:51:44.748211Z","times_seen":18502920,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":25,"connect":43,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/webpack-dc70ca3f65676011.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.043Z","timestamp":1789586944043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/webpack-dc70ca3f65676011.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FNRHXTULvNHsk7UHBusMSB1j8AokoSMaXcAabwt%2F6Ebae%2F3FYNRRjNZdgR1F7QUa3ngZdoLIc5K11jH0fTdqZ1LkzHV40hy53C6jRFt41BvQhAUqYIK%2BM61CaYajpFyGJg%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247205a93f294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"webpack-dc70ca3f65676011.js\"\r\ncontent-encoding: br\r\netag: W/\"92342bee57dc3f153b2faf6701bdda9f\"\r\nlast-modified: Fri, 11 Sep 2026 07:41:13 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/webpack-dc70ca3f65676011.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rt62w-1789584502186-ff8b96458f7e\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4244,"size_decoded":3137,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3752)","md5":"92342bee57dc3f153b2faf6701bdda9f","sha1":"1aaa14eba382f5f56c4bc23b0f7ddc8586eadf46","sha256":"648fe22394a1343e7348f48fadbe9cf3cbd3c611405ca34d9d2bc73f852b59cd","sha512":"d38db9a992a4d3e04cdfc05fad17836eefd3580ba17eff2bca7841e50d36154786ed3de4a905aff128a9b743f81c551b8ca6bc2d949dc7d450058c46b102ab87","ssdeep":"96:25lOU4E5qZjqDOaWzm+IVW+kVa6+sdivFLcP6pZx38:25F52aqIwvcediNLcyLx38","tlshash":"4291c4da7681f4b51ad374a0103fd05aba7b2573541ee8a0e70ae8f53c38d898522f95","first_seen":"2026-06-27T08:18:19.220647Z","last_seen":"2026-09-16T19:29:52.274894Z","times_seen":7,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/chunks/975-f1e97d632d6af561.js","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:04.069Z","timestamp":1789586944069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/chunks/975-f1e97d632d6af561.js HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfu%2FrRAU2fpv9S3%2F1Ug8DCI1%2BLqb1x%2FGa%2FoGgTAyOi5oMvG9b1h%2FzvWcskN254z4rTkz2MSvgzFnSDe%2FDNE4stOkupDBNlkOj55X43O5bhRa23KTLRLtyAw%2FpyZfN%2BWuqns%3D\"}]}\r\ndate: Wed, 16 Sep 2026 19:29:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-ray: a3c247208a9cf294-CPH\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"975-f1e97d632d6af561.js\"\r\ncontent-encoding: br\r\netag: W/\"bf0d5a2e785fff901d80e1dbe7a27189\"\r\nlast-modified: Wed, 16 Sep 2026 18:48:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: accept-encoding\r\nx-matched-path: /_next/static/chunks/975-f1e97d632d6af561.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k25cv-1789584502187-fe5e6fcf7c60\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30750,"size_decoded":11751,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30701)","md5":"bf0d5a2e785fff901d80e1dbe7a27189","sha1":"36c1d1af73a3df331d319534c0215703cc4f9088","sha256":"1e76a7e618af66f7ed7080f4754f013d5df12ca01da76934524dac2260f20dbf","sha512":"c41128db9780e4cd2ac41296ecdf661ad435c0f22831633673337185af9b480f12bc36d833111fcbbc443bf6234633de82a1ea69aff50d2e9dc5afca8aa403a1","ssdeep":"768:Hgw67nRBdO9jYE8oZCEvccdoefdP/9JC2tt9KuwubY3PZzR:HZj9HHC2ttjY3PZzR","tlshash":"45d21a1a3093a47c5aff93e2d03ddf5da2391512a00d46a8f2ab4e329f45b59c15ef0d","first_seen":"2026-09-16T18:49:14.64707Z","last_seen":"2026-09-16T19:29:52.27579Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.ristek.link/_next/static/media/poppins-latin-600-normal.d8692086.woff2","fqdn":"www.ristek.link","domain":"ristek.link","tld":"link"},"ip":{"addr":"172.67.207.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ristek.link/","date":"2026-09-16T19:29:05.283Z","timestamp":1789586945283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ristek.link","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 14:09:09 GMT","end":"Mon, 19 Oct 2026 14:09:08 GMT"},"fingerprint":{"sha1":"89:C7:E2:A7:71:92:A9:87:93:53:1D:C9:F2:8B:20:1D:D7:3D:99:11","sha256":"09:DE:92:20:3A:DF:A5:BA:0C:92:C3:EE:E7:0E:B4:D9:BD:96:93:C6:06:3C:13:76:6B:24:4F:9A:60:07:F5:1F"}}},"request":{"raw":"GET /_next/static/media/poppins-latin-600-normal.d8692086.woff2 HTTP/1.1\r\nHost: www.ristek.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.ristek.link/_next/static/css/864b5562689ebf55.css\r\nCookie: cf_clearance=CB3F.1TaLLJSr2aGwFFEK8RNwAVKQhcP8gaAI5eYtTg-1789586945-1.2.1.1-IiFU2jDGb2fNXmSzTylOhJCLooT.FG5gsV.6.KMpr4sGuO4ijv_QVxRquJ9RO7QyY9hKNxnQzx1TCH8DKzXPNOGI3hMXfjDTKMCYu0.UPIx_eheW0bv.V_ZASZ4lgMe.pCNkoRDFZDDFFC_PyS8wdqgnkuom_ZERCkMAltR_32.aCBMO9f3hu0Yb3_RN4YNvKKpIK88A50E04zgYzqgyyCx0IX8u3Rs5esQYvyJbQt_.dQ4AY5CkoaenTyrv0j0eyKH8LRqJ1ymWZ25EB0RHWTnssoGEQ1ztGJYuB6hzWQKX67ZqDzHxpv1DewFNZklb96xUoGx0EJBmWq4BLPQHuWYgOPpamaTSnv9LvtvlfPo.i0ZmGQYQwEMqWjhobp.dvZ4MKwB_bfzdnVGudU9E7z88k_MQD0AxfIrYtw0hGXk\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 16 Sep 2026 19:29:05 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3c247281b59f294-CPH\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2441\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"poppins-latin-600-normal.d8692086.woff2\"\r\netag: \"72993dddf88a63e8f226656f7de88e57\"\r\nlast-modified: Tue, 15 Sep 2026 11:03:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/poppins-latin-600-normal.d8692086.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8x4bj-1789584503314-85c0f5917927\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4eUoTXCOczBWzBk2oEgCUv3jnhvqLI8jqSAuqb%2BILhUZlZ%2BMJURpj52CruaFy08ZVYuOGGskN6SWAFk%2Fy6ntIglHiy5ELDL69tXu6l4iLi3dqxCcr2Q%2BwemQUcvS80UXk6w%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8000,"size_decoded":9054,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-09-16T21:55:17.423135Z","times_seen":307208,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"www.ristek.link","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"www.ristek.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}