{"report_id":"0b2ce61f-2ca0-450d-9b3a-662f50182a62","version":0,"status":"done","tags":[],"date":"2026-10-03T16:37:06Z","url":{"schema":"https","addr":"thermai.org/en","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"104.21.35.165","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"thermai.org/en","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"title":"THERMA — crypto mining on autopilot","dom":{"size":63527,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63457), with no line terminators","md5":"a89bef2786c67baf18d28c4788915cfc","sha1":"f3ee7acb9ef1510f8a13c7b341dd15148c0125e9","sha256":"bb6ede04559012ab8d31f9411454dbaded969a97412559c43097f78433f2b8ce","sha512":"70bc8a842cb01eb3d27f42670778129b0a0bfe3bd595313afeb05517ca5eaddbc7040c72761b801431d690400a0064fe3e0e60d582dae03927249c7ee2897ad6","ssdeep":"768:/XHuVZV4LCcFSDqk+X3dNod361t0V1WmwaxFIsg4QniZJQB34AwHGHQ4lgWVVVeB:8cvdNodK1t0V1WmwaxFIsg4qTGxE8","tlshash":"0553543ab006dd2efd6a3d89117e6d3a60ce915fc694dd7486dcce140683c397a939c0","dom_hash":"domhash1a2d3a3ae1c275e40404b114d97dd4be","first_seen":"2026-10-03T16:35:36.480536Z","last_seen":"2026-10-03T16:37:10.907335Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"thermai.org/en","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"104.21.35.165","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-07T16:37:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"thermai.org","ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-09","domain_rank":0,"first_seen":"2026-10-03T16:35:31.540363Z","last_seen":"2026-10-03T16:35:31.540363Z","alert_count":35,"request_count":35,"received_data":1546194,"sent_data":21141,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/0g3brkgluwchs.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62716d97b9c8787809a5b8552d7af3ff","sha1":"f07feb18f68850c940a881024e778965a5c05746","sha256":"1f6655ff5132faca5414ee8a4bb11e507a779ad3f3b380400a80bb9b1d5767c1","sha512":"918789962f4208ae1a4bb76f3f173f18c78383118a2450ca2a421a879e1578d5063c186d0514fe864fb3a7a4d87d165f10e98002d15584f84f4446dbc223c229","ssdeep":"","tlshash":"c001f1789a39bc71169022afc22f6b09b16f24a69009082052fd5d4558b5add20e31cb","size":787,"data":"","first_seen":"2026-10-03T16:35:36.502408Z","last_seen":"2026-10-03T16:37:10.926528Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/en","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-10-11T16:43:40.25725Z","times_seen":287124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/en","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e5fcfe0fb9fcb748cdebba6dbb5f7eb","sha1":"21fb3dfb71e122bcdf74a1bcedd6bc12c7104fad","sha256":"d5a39f0f16b003af1f0aa1f330811923e6fdde59c9c94ce19a960d44e4332a00","sha512":"02e7a8fd4eab5070e2391a07503fd3c3b77c7217c8d540e6c6ed396d98faef8a9ce9bc70a4fc48f8d23c1c5b345eed0a08fde1d429dd86289187a6215a97ba5d","ssdeep":"768:D34AwHGHQ4lgWVVVeG27PNyRoTv6H6b9wgFDK/EaNt+N03GLME2s:RGxEs","tlshash":"aa03cc79b406ed5efca97d85117eac3a60ce92af4684deb582d8cd14098383d77d3ac0","size":38930,"data":"","first_seen":"2026-10-03T16:35:36.509982Z","last_seen":"2026-10-03T16:37:10.96028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/310vm2bl3xxpt.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea8ef2b114a0a6403675863a7cb2dd6f","sha1":"1f910f3d5e6d09865d65c98d9daf6b627baae98a","sha256":"8a943b00599e56b53569f36f4341e3465ae7705c1391562cd6c7e1f290c0c387","sha512":"486a9e88ab2830322c054cc85a7eb357f62283e837c5278689d5781a9e8395d0fa0abe8577c10405e757d60726e9a2ba3ad5494416b42034c8c4c9510a76e96f","ssdeep":"96:YQ52j45y5Iie0RES0s0QPf59GCL7saERVV9GCa:kDhEBs0I+EZgCf","tlshash":"dcb1c711f291e88ab76a009925b7b00ef224342a9b75e87277dc18f25bc05f57d2e7d8","size":5364,"data":"","first_seen":"2026-03-21T04:14:12.38616Z","last_seen":"2026-10-11T16:12:21.951513Z","times_seen":3524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/1mpnoxox0-4cg.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f1349267f1c7adcda2ea78ea8c8aae2","sha1":"7ca8ca5094db5824384bd5e94102ff9966563024","sha256":"a10b829a072d8825cc022603049242f3368454f2e380ccc5fa6d7ddd74fdbc79","sha512":"f2917adc5f83901f95f4cbd3537816ca8b8b98a3c6e27801bce9044cb9ad42e94232d4d277fbcb1d4ebab25aaddeb48b86c481d6a8eecf9feb76ee812d104e6e","ssdeep":"384:8MpJVrLnTksAORMZ7fRDRkG0OMMic9b3kdBGQHZtJ:8wVrTTNLytOOoc9rkdBHZD","tlshash":"1da2a4b132d0f8d152df85d5c437401af26d1d7a20ae70a4a7e5ccfa369098de1b2fa9","size":23131,"data":"","first_seen":"2026-08-07T21:31:23.081309Z","last_seen":"2026-10-06T19:17:54.692493Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/3nw0oypld22c3.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c22c06f65a46eb02725e46c1cf1d4f63","sha1":"4d8194c3b2d6293607c1e6deacef1d9406d2d56f","sha256":"3496d868e2c6bfb4da80799a67a92f331d6428b373aa6ad7a9f8f35462e24840","sha512":"10f5ff26260a78ab8bf95b66872b165e11700fe2f65dd55f1087415b7764db47fe038ae5e62e5794edf64250da8f28f5201549313eee3ce06d6aa715d188ae28","ssdeep":"96:UNLxPZ5hqFXf3gXhC2rUXoXRiyURIQR8xKyJKA+cs1N86fNj6brCKhvO+AT63jwL:U/ZWBYfw1wN+cKWho05uHUg7","tlshash":"d5c1f019e109bfedf45909d96a2f900c712f1768cd0e0874b9bc7c9a291c2d1ba53fd9","size":5649,"data":"","first_seen":"2026-10-03T16:35:36.507238Z","last_seen":"2026-10-03T16:37:10.944434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/3byuobrkyz9bj.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72131df718ecdbf8c8f74f92d8293197","sha1":"4c4f90e10430d556c767c7b76fdc238c94c1d0b4","sha256":"2998459ef0c506d9417d5337fd7c562b13913d9eb939016648e0352c0b037eb2","sha512":"efe8bdb598bf7b2d11381887fffaf9e07c50e43516b53ff5817c94328cea39048f05b26fc1e61f845760e012ae59f2aab30f814f9622fbd6048ca1c6ce36f43b","ssdeep":"3072:nLt1U+Rn+36F3viSRoB8hoS4kslUkRgjwzeDRJcWvR:nLt1U+Rn+36F3luloQeDRJcWvR","tlshash":"2224fbe83955f6626ab302a710af1803b338252b280d4d60b311fdddb57845eb17bf9e","size":229156,"data":"","first_seen":"2026-08-26T19:38:37.009311Z","last_seen":"2026-10-11T14:19:12.068565Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/025adkuurx-h1.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1ac6ffc697d1b008e6ebd394fbb60ed","sha1":"8ff97aaf4ba9425ee2710c8f91077d01140b5436","sha256":"48cf583dd1d340c9f0d08c2cbb5d72e27df34bb489c22ec287e31369bb866a41","sha512":"c75064d9abfc0950357ddc94c4f77236672e236a439b865ed90865b20cfc26233e1fde028c2870be7c15401632c367c9b83212fa2c28be706c1419782523719a","ssdeep":"384:LGHZTAWmQkbGjw1pl5JEI+2nxfJF41am/9LbV/GmnrGULVvc8bKeX3SNO:6HZAVQkbTZ5JEI/x41amlLbV/GcrGULT","tlshash":"57b20ba07395f9b9936740c4802f900df23f1aa89c0d8564f7fd6ca93930989b5b6fd9","size":24081,"data":"","first_seen":"2026-10-03T16:35:36.494172Z","last_seen":"2026-10-03T16:37:10.924779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/224qnohvuryce.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6435a396957203b9c8d47a21c109a48","sha1":"45c62656188eca3c4c38421f736a65ee18942135","sha256":"cf9ebee2967779a7b89d1594abe62938b875952d8b46195ab0c57b0c75c44682","sha512":"17583188e01864d3c9528bc9a8f2c7d7f648d740d0f79e0d98d915affe375b1cbf26b6b10e5734d9655daf55653673f6f1fd79ceb9400b6055e96dd9053e490e","ssdeep":"6144:x5Ijbk+eecHYpqLjfYDIMAi5wbB7J+de/xfIcczTBx+jE8xgKvSzF:xic+eecHYpqLjfYDIMr5wbBIcdIcq0Jy","tlshash":"92746d051789225d0553a346f649bb06bded04fdbbaac3534ebe492b32e1438c2bf758","size":340038,"data":"","first_seen":"2026-10-03T16:35:36.499147Z","last_seen":"2026-10-03T16:37:10.942532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/turbopack-0iwplxx1ahl2u.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06287a39db86eac10d5429ef849747da","sha1":"f47488c5ebb9ffaf927a5f748b61cb606a08cfce","sha256":"b644c1a08853caebe7145cc87815e3695d3ad86cd49f0ecf63af4373ed246712","sha512":"dc5aef0926d1ea3f02ebabfa2f56d777ccaa9083d3bbbec8279a60f8cf6ac8aa2a303b3986cb8cfd01ffa2c6dd748816273269b4f53847a38797828f297d16b2","ssdeep":"192:g+qdHpo28YeEsp+/EEJbrcHoHx5iFJRQBT4fIopDDhJWoVaLEM2:g+qdJkQrcHaiFYqIQv+TI","tlshash":"bd32d7da3791f43343afa4eac07b5040f2794469082e542cd358a8f738740aa86e7f67","size":10946,"data":"","first_seen":"2026-09-02T20:46:19.64965Z","last_seen":"2026-10-03T16:37:10.949966Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/2e_lrwr-bf1eq.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2be13d699a4cb9d58dee16ac684aeefe","sha1":"cb0a7b95f21e60838af2b4156ca4945d4a417dce","sha256":"be83f5498e4cc2221179a9c8a9dd4534a3b8703de9c5f9787a3e90c0f50253a6","sha512":"126d11423d8f25329a73a6b889c8023f2d6a69022e55de6fcaaa9be06f0446a793654b7ea24b2e497d34a886774f10b5404d5dd38c21eb0f813b82dbded584c0","ssdeep":"3072:lOz1HOx/LZmNURo/6fPE2ZKeR+7IIPgfX:lOz1HOx/tyURo0ZKeR+7IIPgfX","tlshash":"6cf3e7f935d5f4820bab54aac03f0006f22c4db7189e6460e3e5dcda746465de1b3faa","size":159932,"data":"","first_seen":"2026-08-31T10:24:40.885234Z","last_seen":"2026-10-10T09:55:54.950275Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/2mmpezlrfmbu5.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ddd54b88a2ef9a832652aa9f3eb6c55","sha1":"8a24058fcf153ac142c04454d12f8cbbec40936b","sha256":"91f598badaed9141b1c267e346cdd724a023add2b14f3b6d5d8e7b280825c172","sha512":"15518f6dcf3bd4268861330f1bbad39366f538680ccac05df9b3eb0aa77fa9d449c675d7b26a98e7e432e43d22cf6df5a17826b3ab5ca7b26f793b4803212c38","ssdeep":"384:YH1XC/xEmbSwXpNC8veOr96PLsyNYK21x6jnbt1k6ALEDwSpQ6MpkbbG3:YHORNV1xOZ1wE5fMpwG3","tlshash":"8af281a572d5f5d1139784e4843f401af23d0d7a246db0a4a3f2ccea79e094dd172faa","size":34718,"data":"","first_seen":"2026-08-04T05:27:48.559748Z","last_seen":"2026-10-11T16:12:21.96383Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thermai.org/en","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-03T16:36:31.338Z","timestamp":1791045391338,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /en HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 03 Oct 2026 16:36:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: therma.locale=en; Path=/; Expires=Sun, 03 Oct 2027 16:36:34 GMT; Max-Age=31536000; SameSite=lax\ntherma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; Path=/; Expires=Sun, 03 Oct 2027 16:36:34 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=lax\ntherma.src=direct%7C%2Fen; Path=/; Expires=Sun, 03 Oct 2027 16:36:34 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=lax\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/16d91c780434f2ce-s.p.0y1w0k24nk0rl.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/26f284dcc38c84c0-s.p.3hlisc-pwq13z.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/4e1c87b7aa9e2f2f-s.p.3o02-8iknf6dl.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ddLtoHV8RqmgdgRFVaKZQlAP2miTEZQRPlK%2F4%2FQu%2BjCaUJUX3qSQzgvc%2BRTbbdB9Bo3okUK6v5NMWa5AYE3IjDphFHx2qUcumDzoN1KXGEeE%2FibG%2BWUUzcBdav0CA%3D%3D\"}]}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a44d5dd49de85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en","quoted":false,"path":"/","expires":"2027-10-03T16:36:34Z","raw_expires":"Sun, 03 Oct 2027 16:36:34 GMT","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"therma.locale=en; Path=/; Expires=Sun, 03 Oct 2027 16:36:34 GMT; Max-Age=31536000; SameSite=lax"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c","quoted":false,"path":"/","expires":"2027-10-03T16:36:34Z","raw_expires":"Sun, 03 Oct 2027 16:36:34 GMT","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; Path=/; Expires=Sun, 03 Oct 2027 16:36:34 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=lax"},{"name":"therma.src","value":"direct%7C%2Fen","quoted":false,"path":"/","expires":"2027-10-03T16:36:34Z","raw_expires":"Sun, 03 Oct 2027 16:36:34 GMT","max_age":31536000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"therma.src=direct%7C%2Fen; Path=/; Expires=Sun, 03 Oct 2027 16:36:34 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}],"data":{"size":62394,"size_decoded":13374,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62324), with no line terminators","md5":"80e01b7777f79f65f20609b19897b324","sha1":"ddf428a2023cf83ba52421da5e85a02d11b417e4","sha256":"91636f4859f0fef9635565dc05122a2cb8e1df8bf3987746a29bbf056ad2471c","sha512":"480be7afea82db065bc62670caa89fb3f5bea6f47e41b8f261b7ef6875073b52c907dbb17a0dafaf45ed9ce3dfafbd46d5bc7da2218cbd0537db825d59174a54","ssdeep":"768:O4aOgZXyJGB9dNod4witukDtPz0FDvfNQniuJQB34AwHGHQ4lgWVVVeG27PNyRoW:8B9dNodpitukDtPz0FDvfNnTGxEb","tlshash":"4d53547ab006dd2efd6a3d99117e6d3a60ce919f8684de7486dcce140683c3d7a939c0","first_seen":"2026-10-03T16:35:36.48272Z","last_seen":"2026-10-03T16:37:10.911295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3489,"timings":{"blocked":-1,"dns":5,"connect":3,"send":0,"wait":181,"receive":0,"ssl":3300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/26f284dcc38c84c0-s.p.3hlisc-pwq13z.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.018Z","timestamp":1791045395018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/26f284dcc38c84c0-s.p.3hlisc-pwq13z.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"22bc-1a0f20a4e58\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24TYWSAVeWyDg5YPhfs%2FK5B11EtwNzITHT%2Fyh9pSinXh1kM9kbNxN9TO9ooSYQ99v9m23CHtaC%2BifDrJFegNKW0Dj05Rza%2F1mJ3i2tTVd5chJ3X%2BikybzLFBmghbyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6dbdd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8892,"size_decoded":9662,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8892, version 1.0","md5":"6465b62dd12646a816e0d80f024ab07f","sha1":"676ac43d8546760df60a9f9fc5c7812d0f80a7b9","sha256":"4995a9a43ac659ec32fcd8b463755cd6a07b31a6e6b3894a6a153b661cf490e2","sha512":"b4150cbe2ae5e93dd57a1c9dc5f97080e86b06cb52c3b1525fe70ffa16bef6a9c03a4b6e543c0b2dbe3f6be27e934c6765e6c99a2bdbae979420b05d125447f2","ssdeep":"192:uCtJSSZhf2f8jgnHOOe0L/ULkshrj4jpwmw7zTwHMvggnHe60X:Qkhue8qw/U4m3ESznHgYe6+","tlshash":"29029d1641344c33e9a978ce54a5090d5dfbb14c93fbbb4359e13d3a63ea47a09c841c","first_seen":"2026-03-19T09:19:42.472353Z","last_seen":"2026-10-11T08:16:17.193872Z","times_seen":121,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.025Z","timestamp":1791045395025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"8410-1a0f20a4e5c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZvDTq%2FUXVnqyDoKZ62gWwuh8IcHqdjuNDGLLbBGKPztqT3t%2FIBgyTbjtOzuFHctYBzF0rb6a1tgfkmND7UlI6erViSuUeqAyBCFmLddjkFeayZQFP1h8UzszDod2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6ebe15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33808,"size_decoded":34573,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.0","md5":"fd7dbbcb3633b5980282063dfa5b321a","sha1":"324d4be3f27a44620f4df5acbeb62b8cf4fb1e2a","sha256":"cc61cbd632bb677cd55f0eec9ebdd3e1525c5f30904cbf0769e2ac50d0fba992","sha512":"3bc5800d775e9b09edaf91015a2320a88c15c668acdcb49c209f2c768bbe4e0f4a1501b985dfef3b009e2c81510fcac8752c9e9016ab5f78941292577d9d6af8","ssdeep":"384:SdyvvujXpJ8JSRwAtLj1R3AyL0tqXHsNBESOGXTWn+W5U8EYLw2cAycHULV36ENm:ShvkSSsj1wW0YUWLY+O36ENkI0KufR","tlshash":"1ee20265c88f6e2353e8dc7299c9b45c1ae5c90f510a1974bd84f620ef71cd7c57a202","first_seen":"2026-08-29T14:48:06.18876Z","last_seen":"2026-10-10T08:40:49.709962Z","times_seen":78,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.168Z","timestamp":1791045395168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thermai.org/_next/static/chunks/2k5txbj2jt-kd.css\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"8410-1a0f20a4e5c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lhkbp28tAOPfGW1hoUJO1s%2BlfZSKd4FMstumN3n6ukl%2FpUinj0qM%2F6BFuKfSqOvv55P15CqhKaP3lVFW1Fy6eN0YjUsjojsx5UZSQV0vbu%2FRtkkJvXzcIch%2BXx0o6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd7cc2f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33808,"size_decoded":34579,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.0","md5":"fd7dbbcb3633b5980282063dfa5b321a","sha1":"324d4be3f27a44620f4df5acbeb62b8cf4fb1e2a","sha256":"cc61cbd632bb677cd55f0eec9ebdd3e1525c5f30904cbf0769e2ac50d0fba992","sha512":"3bc5800d775e9b09edaf91015a2320a88c15c668acdcb49c209f2c768bbe4e0f4a1501b985dfef3b009e2c81510fcac8752c9e9016ab5f78941292577d9d6af8","ssdeep":"384:SdyvvujXpJ8JSRwAtLj1R3AyL0tqXHsNBESOGXTWn+W5U8EYLw2cAycHULV36ENm:ShvkSSsj1wW0YUWLY+O36ENkI0KufR","tlshash":"1ee20265c88f6e2353e8dc7299c9b45c1ae5c90f510a1974bd84f620ef71cd7c57a202","first_seen":"2026-08-29T14:48:06.18876Z","last_seen":"2026-10-10T08:40:49.709962Z","times_seen":78,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.028Z","timestamp":1791045395028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"c6cc-1a0f20a4e4c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHRSE9rTSGHZRrEBcGG6MXu1JfxuUwMdMmKQ7jUdKyCgFK4oGEouq0w7A3imIJY5bVrNFs2lQJCAvVQTts05sWD61Ut%2FRPbBP1a5PrCNjUfhM888I18yvdzh5XZSJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6ebe45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50892,"size_decoded":51655,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50892, version 1.0","md5":"edd24a2b43a9a3763e35d2cafcfee422","sha1":"aef5c246575b42d4b4c752a89f9e5999cf59589e","sha256":"d7f07f8a308ce0a7287d79a65a85cfbc0f4741ef426bf1a3902d24392cc71723","sha512":"64975ccf51e8ee93c9dbd89c8970de1a5ac94320b514a078055edca5eacbdc97bcf2fda2c20bc06417bdd7ecf74a9b510a06cc87fb603d41477a9555facec157","ssdeep":"768:mUwqQ7yuIUHXQYrnVvc3fkOpvJwh9+8NGj4kthRh4apkXtSkngaKEGzXzwKl9D76:nwqQBzAb3fpS3GjptrpkFnYzjXW","tlshash":"1333023f4566e2de2f168b3228db883625c0efd51e49e221cc15b9ed2d2d21067473de","first_seen":"2025-09-13T15:32:30.79209Z","last_seen":"2026-10-11T13:42:49.306381Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/2k5txbj2jt-kd.css","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.030Z","timestamp":1791045395030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/2k5txbj2jt-kd.css HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Si6Ox8U4Bs5hbhhIFDq3tmS81yOV6Xgzmtom3bj101fiTWQQhegMHP5LxeRSnW%2BjD2HnyTtWK2OR4QxUG8kE8FiF%2F75%2Fg1B6JzAjQZqrTECLtW0r6GU%2F8JxHHDpHjQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"e601-1a0f20a4e70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:15 GMT\r\nage: 72439\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6fbe55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58881,"size_decoded":10157,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20938)","md5":"0596d09b25e76d5af3f139047fd2263f","sha1":"3d1958487e11cad8c3d0896a8bac1f66d3ec69c1","sha256":"87767fd3e9d60b2c83f9866e672561abf7a5e298912d67b2d7bdc37c6df076f6","sha512":"c5dcd22c09967d63478b1741faaf8daa94a18ca5b960c4e187950b89fdc67db8baedd9ed4e0705dfefa508c01101199a28a04003be318e2b5bfb36feaed47f47","ssdeep":"768:BHodjIoKSJoPlSo88ToBa2XyiQtDtL6ThuODTvFXs:Rh+DgyXlGJ","tlshash":"9e43d9741116b428eab3dc6236ce2e4f740c60225b976666d91c7a64cfcbaf71bf0318","first_seen":"2026-10-03T16:35:36.501385Z","last_seen":"2026-10-03T16:37:10.91975Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/2e_lrwr-bf1eq.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.042Z","timestamp":1791045395042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/2e_lrwr-bf1eq.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZT%2FXx50lyFNby%2FOP0b7ExpK1QgUYJ3HVm8ud7NOcgpUSsmUFwEl1H2HNGOw50q7uHlG%2BXhHz8nONol485t%2Ba3%2FcAw5KKcANQS5KCzaZTvX7xhMJeD%2F3tzMaCNwa2Eg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"270bc-1a0f20a4e68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:16 GMT\r\nage: 72438\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd70bef5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159932,"size_decoded":44650,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36920)","md5":"2be13d699a4cb9d58dee16ac684aeefe","sha1":"cb0a7b95f21e60838af2b4156ca4945d4a417dce","sha256":"be83f5498e4cc2221179a9c8a9dd4534a3b8703de9c5f9787a3e90c0f50253a6","sha512":"126d11423d8f25329a73a6b889c8023f2d6a69022e55de6fcaaa9be06f0446a793654b7ea24b2e497d34a886774f10b5404d5dd38c21eb0f813b82dbded584c0","ssdeep":"3072:lOz1HOx/LZmNURo/6fPE2ZKeR+7IIPgfX:lOz1HOx/tyURo0ZKeR+7IIPgfX","tlshash":"6cf3e7f935d5f4820bab54aac03f0006f22c4db7189e6460e3e5dcda746465de1b3faa","first_seen":"2026-08-31T10:24:40.885234Z","last_seen":"2026-10-10T09:55:54.950275Z","times_seen":175,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/1mpnoxox0-4cg.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.047Z","timestamp":1791045395047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/1mpnoxox0-4cg.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00c8XM57R0dhhhsQijhZ4nmXeEifSim1ItRiebevI9pH%2BM%2FwQjrkSGFuqP7IGTDBOglqiDgfF1Xx1t1Lm8q4GD7aqZHT9Z4gfvcDscxgTzzHw5gAseJCl27QnlFiwQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"5a5b-1a0f20a4e68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd70bf25a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23131,"size_decoded":7579,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23129), with no line terminators","md5":"0f1349267f1c7adcda2ea78ea8c8aae2","sha1":"7ca8ca5094db5824384bd5e94102ff9966563024","sha256":"a10b829a072d8825cc022603049242f3368454f2e380ccc5fa6d7ddd74fdbc79","sha512":"f2917adc5f83901f95f4cbd3537816ca8b8b98a3c6e27801bce9044cb9ad42e94232d4d277fbcb1d4ebab25aaddeb48b86c481d6a8eecf9feb76ee812d104e6e","ssdeep":"384:8MpJVrLnTksAORMZ7fRDRkG0OMMic9b3kdBGQHZtJ:8wVrTTNLytOOoc9rkdBHZD","tlshash":"1da2a4b132d0f8d152df85d5c437401af26d1d7a20ae70a4a7e5ccfa369098de1b2fa9","first_seen":"2026-08-07T21:31:23.081309Z","last_seen":"2026-10-06T19:17:54.692493Z","times_seen":21,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/025adkuurx-h1.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.054Z","timestamp":1791045395054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/025adkuurx-h1.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYhQO5m2Q9%2FeNgAL2czZCIx2cyH9UXWNx6hNK2Bbz7lOix7ORGOryTEfiiJIrt0lQz6AcQ37k5XdEWRycEkoaim5CnZYFKkQ3I%2F2TBttqFAhD8%2FISTLJ4yw03Nt8og%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"5e11-1a0f20a4e6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd71bf65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24081,"size_decoded":10040,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24079), with no line terminators","md5":"b1ac6ffc697d1b008e6ebd394fbb60ed","sha1":"8ff97aaf4ba9425ee2710c8f91077d01140b5436","sha256":"48cf583dd1d340c9f0d08c2cbb5d72e27df34bb489c22ec287e31369bb866a41","sha512":"c75064d9abfc0950357ddc94c4f77236672e236a439b865ed90865b20cfc26233e1fde028c2870be7c15401632c367c9b83212fa2c28be706c1419782523719a","ssdeep":"384:LGHZTAWmQkbGjw1pl5JEI+2nxfJF41am/9LbV/GmnrGULVvc8bKeX3SNO:6HZAVQkbTZ5JEI/x41amlLbV/GcrGULT","tlshash":"57b20ba07395f9b9936740c4802f900df23f1aa89c0d8564f7fd6ca93930989b5b6fd9","first_seen":"2026-10-03T16:35:36.494172Z","last_seen":"2026-10-03T16:37:10.924779Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.176Z","timestamp":1791045395176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thermai.org/_next/static/chunks/2k5txbj2jt-kd.css\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"c6cc-1a0f20a4e4c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DV%2BmJ1B56yP1NNsMiw%2FmC0EWF088g1LL14Pbd2WuftGo%2BT7%2F8pUAJhBqPR49eGDI06lmSlNYuzz5C8RVH4uMV%2BvBz2W7t%2F%2BlrtRvSyU74KE5smE9Yd7PqwIZvy3TQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd7dc345a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50892,"size_decoded":51667,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50892, version 1.0","md5":"edd24a2b43a9a3763e35d2cafcfee422","sha1":"aef5c246575b42d4b4c752a89f9e5999cf59589e","sha256":"d7f07f8a308ce0a7287d79a65a85cfbc0f4741ef426bf1a3902d24392cc71723","sha512":"64975ccf51e8ee93c9dbd89c8970de1a5ac94320b514a078055edca5eacbdc97bcf2fda2c20bc06417bdd7ecf74a9b510a06cc87fb603d41477a9555facec157","ssdeep":"768:mUwqQ7yuIUHXQYrnVvc3fkOpvJwh9+8NGj4kthRh4apkXtSkngaKEGzXzwKl9D76:nwqQBzAb3fpS3GjptrpkFnYzjXW","tlshash":"1333023f4566e2de2f168b3228db883625c0efd51e49e221cc15b9ed2d2d21067473de","first_seen":"2025-09-13T15:32:30.79209Z","last_seen":"2026-10-11T13:42:49.306381Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/0g3brkgluwchs.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.048Z","timestamp":1791045395048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/0g3brkgluwchs.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGjsw2aoScfDFQlRPrzr0nKOjtEvTocwaBmVPnay9syNNh95am7j8riI1wTLCjDBSkqm3SuqksScX2D9%2BPwQnNbKPU6qiRIQPT0dIdNSkucg%2BbrcddgEO3cXO83pdw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"313-1a0f20a4e70\"\r\nvary: Accept-Encoding\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a44d5dd70bf35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":787,"size_decoded":1285,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (787), with no line terminators","md5":"62716d97b9c8787809a5b8552d7af3ff","sha1":"f07feb18f68850c940a881024e778965a5c05746","sha256":"1f6655ff5132faca5414ee8a4bb11e507a779ad3f3b380400a80bb9b1d5767c1","sha512":"918789962f4208ae1a4bb76f3f173f18c78383118a2450ca2a421a879e1578d5063c186d0514fe864fb3a7a4d87d165f10e98002d15584f84f4446dbc223c229","ssdeep":"","tlshash":"c001f1789a39bc71169022afc22f6b09b16f24a69009082052fd5d4558b5add20e31cb","first_seen":"2026-10-03T16:35:36.502408Z","last_seen":"2026-10-03T16:37:10.926528Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/0tpb3tf23lqd8.css","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.056Z","timestamp":1791045395056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/0tpb3tf23lqd8.css HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vQZlo681Auq0twywwsi33SB7teiYlJNxmlhgRSkmvuVkLBYniPw8Cb4m8QODAz355cVNUgiC9V%2Bm3HQfx8baomQ5fpTXcCT3LVk2gk44ia6sHNIws3joAPVvVh6%2Fg%3D%3D\"}]}\r\npriority: u=0,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"7780-1a0f20a4e60\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:15 GMT\r\nage: 72439\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd71bf75a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30592,"size_decoded":3343,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19370)","md5":"7acf570057822e7bc7c8a0b5132ad6f2","sha1":"137cf33046d232752725720fcb82363eba23b6f3","sha256":"c88e96e99349ba44ae2b46ec0c258c26181d07feeeda62250d2960e8229e8561","sha512":"b168564cc254d3f06500e9c6a4d84b5e976f341b029a1a3d9f2a0230818d18803299d53aee24e58da3b10833003eaae0366fd51c519d79d7070d4b0430b49174","ssdeep":"384:wOuOlOIOqaSJhcZXR3NnOWJOcZXRWNnOnJfcZXR5NnOwJ0cZXRwNnO5JFcZXRLNf:/HodjIoKSJoPlSo88ToBf","tlshash":"b2d2ef34001b6805d3f78c7330ce3e47681d5431279aa523992e7ea4ceea9bb67e5738","first_seen":"2026-10-03T16:35:36.500221Z","last_seen":"2026-10-03T16:37:10.928305Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.170Z","timestamp":1791045395170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thermai.org/_next/static/chunks/2k5txbj2jt-kd.css\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"8410-1a0f20a4e5c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjyVAB9u8QtyJ4ZViIHFxYo%2FHcgkuyGpDgv1NHjAB8nKWt1Uj0hXDMIkOl88WgcF7Wzl5vXp171PMdPAfhUhpnlV4kswMfkLH59e%2FF2e%2FxHGF5aPBDM7RR82j5XxFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd7dc315a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33808,"size_decoded":34575,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.0","md5":"fd7dbbcb3633b5980282063dfa5b321a","sha1":"324d4be3f27a44620f4df5acbeb62b8cf4fb1e2a","sha256":"cc61cbd632bb677cd55f0eec9ebdd3e1525c5f30904cbf0769e2ac50d0fba992","sha512":"3bc5800d775e9b09edaf91015a2320a88c15c668acdcb49c209f2c768bbe4e0f4a1501b985dfef3b009e2c81510fcac8752c9e9016ab5f78941292577d9d6af8","ssdeep":"384:SdyvvujXpJ8JSRwAtLj1R3AyL0tqXHsNBESOGXTWn+W5U8EYLw2cAycHULV36ENm:ShvkSSsj1wW0YUWLY+O36ENkI0KufR","tlshash":"1ee20265c88f6e2353e8dc7299c9b45c1ae5c90f510a1974bd84f620ef71cd7c57a202","first_seen":"2026-08-29T14:48:06.18876Z","last_seen":"2026-10-10T08:40:49.709962Z","times_seen":78,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.174Z","timestamp":1791045395174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thermai.org/_next/static/chunks/2k5txbj2jt-kd.css\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"7a6c-1a0f20a4e68\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCYcD03vxniZJc%2FEdZjpZJDy%2F%2F5tEQAaqUrDoJ%2Bsjpkm6Q7ngEeaCHEvlaG9jyTWpKbYCVIc38%2BqRjswt9ZtfKbPIQ4n75bmTyOCkS7T6W0%2FsMD2AqFZjeem%2FBV6aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd7dc335a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31340,"size_decoded":32115,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-10-11T16:29:53.878774Z","times_seen":4350,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.179Z","timestamp":1791045395179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thermai.org/_next/static/chunks/2k5txbj2jt-kd.css\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"7a6c-1a0f20a4e68\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2Z%2BleuY%2F8r8DIb2jEYMIhdVA1P0Cji%2FmUv5%2Bploi0YgqeiQ9g3EPOUNFrm7020z5ekEqRMjDLyGgMCiO6deBEeoOOoyQe%2B%2FusDQd7hx28RHTfY7QBf37WAA6r6lMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd7dc355a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31340,"size_decoded":32113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-10-11T16:29:53.878774Z","times_seen":4350,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/icon.svg?icon.2e-rxkoon_xfc.svg","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.271Z","timestamp":1791045395271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /icon.svg?icon.2e-rxkoon_xfc.svg HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nlast-modified: Sat, 03 Oct 2026 16:36:35 GMT\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynAdTpmckiQKhdw1Vx2Qq%2FM5vE%2BbQbv0Wjb%2FC1TVw%2F6BSg%2BFcHhFmG5tm7RqwLEti9uL4Z0894Es6D%2BHNxpkP19v6LHpFTKJLhNaevpNz1UhdXy06u1QvBw86wsawA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a44d5dd87c5e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":903,"size_decoded":1553,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f5b405a7f02e05fc03284c75a28d8713","sha1":"7421a88fafadfc17340c70e21803543b14ec69bd","sha256":"16b82ac87dc7509c13610c3a8f810d1190e74fdd4cb7cd550a2f842ff4857496","sha512":"4d0f6797fd6bb23758a5656d0c2a9deefb46acdbed7856d7273546f6242f7b5ce23274f8d97272c48297675798ecd261ed04b303e1a81fd30d53af420a0a84bc","ssdeep":"","tlshash":"2111e316e4ce7c169614e4678a04ad4c71aa50bf7ba3523172dc2f1f3fb1440894f799","first_seen":"2026-10-03T16:35:36.489482Z","last_seen":"2026-10-03T16:37:10.932382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/en/login?_rsc=1vwYfVB7_E9t4fEj","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:36.150Z","timestamp":1791045396150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /en/login?_rsc=1vwYfVB7_E9t4fEj HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:36 GMT\r\ncontent-type: text/x-component\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUnM9ViFbEidJRhTOAtjYeilnQeu7V%2BLGaFbv4jcBhMUmi965gpwsN%2BrM%2FD0BCF6EZQ5tm59OpaChmAW%2BhURgbm6c450%2B9dm2hQ1vmBVEHewXLI7ywDWKSnFxu2n7w%3D%3D\"}]}\r\npriority: u=5,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dddfdc35a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4659,"size_decoded":2441,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3600)","md5":"36ebb759ab3bb0b6fe5de1765f9c4ae5","sha1":"659b04020ede4a1adb06ab8dda12bc1b8d4cf820","sha256":"0396650ad4e048dcb778fe8c80e806dbf6c3d9cecb7735c0fd130fc1ddd4f689","sha512":"ec805a635dc69f38e0ef48fe20fc0a690dfefb0b59e1faeb5003811416c003bb51e936230646e0162d547b54a292c6f0231c8edfe6e574d353cf206ba4868d57","ssdeep":"96:WW77K2DfInh1u9OMqHHVk6ZJBida7S7qy7Hf7u/41u5+FDDek6Z9Eoq8V0:WW7jDfyugpHHKgBida2Xbfq/41u5ADDX","tlshash":"69a1c07fdb148c3eebd746c8245f3206a28e132bcb54ad7bca4c0e0905d77591e962b1","first_seen":"2026-10-03T16:37:10.934834Z","last_seen":"2026-10-03T16:37:10.934834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.015Z","timestamp":1791045395015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"7a6c-1a0f20a4e68\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JADNnlD6D80zoyTTBEct3Bl2WiVsKJpHJPvLeWScL2AJQ7vNj9nn4XXLov3Q0vLJKf9%2Fd0ebwRURvgcRVR0KfrvyknORttzKfjTZc5yj88jh8YgidUaZu3dG5cv8BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6dbda5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31340,"size_decoded":32103,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-10-11T16:29:53.878774Z","times_seen":4350,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/2jk8k5oxytkef.css","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.032Z","timestamp":1791045395032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/2jk8k5oxytkef.css HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYwTf%2FoVvfXnkgqB%2B9UK1jFQx6ICkd8Mpb22Ung%2FJvown%2FjRj6%2B%2BaW%2BQquDPHsKxM2U9EmysSuqmSDU7jGHOACdvrt84lXApTEE%2BtD8wifqgipJpNVAPKfxyWzwd%2FA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"3706-1a0f20a4e6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:15 GMT\r\nage: 72439\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6fbe65a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14086,"size_decoded":4222,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14085)","md5":"e9beeca51ac870c7b95bbf117123698c","sha1":"1677b165203d774e926049845ad3caeaf85e9e1e","sha256":"a478b606452b657eff51e78a8a6e59179650471d67326447ea3921f0c2bf4267","sha512":"2a074caeaff1bf37353f351b1e703f8a385f0bb26cceb269805a63ce559ba19a6cc505cd370cfb92f0bd8992f8b3c3872a37ad8437d95f97a6c8355e1f335a7a","ssdeep":"192:LiPUo8kYb5pQv6P//20nvFGUxEoQu+5lc5xPvflxG0gvFq:+PUo85b5pQvA//20nvkoQh52Lvaq","tlshash":"58525fe96ba5e239fd26fd50abcdeb8cb01438035d1353e6ed45911289cbbf71a50b08","first_seen":"2026-10-03T16:35:36.484653Z","last_seen":"2026-10-03T16:37:10.938429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/310vm2bl3xxpt.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.034Z","timestamp":1791045395034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/310vm2bl3xxpt.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZX0kzhTSI4TnObDZojUuZx4G8FT5WhYP%2F51GgyC%2BwAEYyZ4FiiDlCeNZXG2l0VExJ7vslP7kN2LFvvIxBYRy%2FR4Ro%2F2vdV29uJAnu85CGq4TOQtwP%2FHAm5mkC%2FVyQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"14f4-1a0f20a4e74\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:17 GMT\r\nage: 72437\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6fbe85a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5364,"size_decoded":2796,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2444)","md5":"ea8ef2b114a0a6403675863a7cb2dd6f","sha1":"1f910f3d5e6d09865d65c98d9daf6b627baae98a","sha256":"8a943b00599e56b53569f36f4341e3465ae7705c1391562cd6c7e1f290c0c387","sha512":"486a9e88ab2830322c054cc85a7eb357f62283e837c5278689d5781a9e8395d0fa0abe8577c10405e757d60726e9a2ba3ad5494416b42034c8c4c9510a76e96f","ssdeep":"96:YQ52j45y5Iie0RES0s0QPf59GCL7saERVV9GCa:kDhEBs0I+EZgCf","tlshash":"dcb1c711f291e88ab76a009925b7b00ef224342a9b75e87277dc18f25bc05f57d2e7d8","first_seen":"2026-03-21T04:14:12.38616Z","last_seen":"2026-10-11T16:12:21.951513Z","times_seen":3524,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.173Z","timestamp":1791045395173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://thermai.org/_next/static/chunks/2k5txbj2jt-kd.css\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"8410-1a0f20a4e5c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UoPyZDr35X6txL%2Fl0A6XtbdtN9Ust6O4MgiWMouTAFiCuh6EqI0ez%2Fxw8n5RDN7ag%2BX4%2BFrowvZNB%2FHNBfWXNBMhBXwaaypYZ3mqd8KYJoppXKe0MccCLCrCG2Fp%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd7dc325a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33808,"size_decoded":34581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.0","md5":"fd7dbbcb3633b5980282063dfa5b321a","sha1":"324d4be3f27a44620f4df5acbeb62b8cf4fb1e2a","sha256":"cc61cbd632bb677cd55f0eec9ebdd3e1525c5f30904cbf0769e2ac50d0fba992","sha512":"3bc5800d775e9b09edaf91015a2320a88c15c668acdcb49c209f2c768bbe4e0f4a1501b985dfef3b009e2c81510fcac8752c9e9016ab5f78941292577d9d6af8","ssdeep":"384:SdyvvujXpJ8JSRwAtLj1R3AyL0tqXHsNBESOGXTWn+W5U8EYLw2cAycHULV36ENm:ShvkSSsj1wW0YUWLY+O36ENkI0KufR","tlshash":"1ee20265c88f6e2353e8dc7299c9b45c1ae5c90f510a1974bd84f620ef71cd7c57a202","first_seen":"2026-08-29T14:48:06.18876Z","last_seen":"2026-10-10T08:40:49.709962Z","times_seen":78,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.256Z","timestamp":1791045395256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"c6cc-1a0f20a4e4c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B35YAS08bScacZKZWvWlQyqngSr4Yw7LcQ%2Fd2HbgIWJ6M%2BINYLJ7U3LBoEP5U8CEfSALRLgXytQagt3ZzsH%2Bd4E6hG566Pl7M8E5OA5EHBg%2Bd1V44jrFmC%2BGR6ZaWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd85c575a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50892,"size_decoded":51665,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50892, version 1.0","md5":"edd24a2b43a9a3763e35d2cafcfee422","sha1":"aef5c246575b42d4b4c752a89f9e5999cf59589e","sha256":"d7f07f8a308ce0a7287d79a65a85cfbc0f4741ef426bf1a3902d24392cc71723","sha512":"64975ccf51e8ee93c9dbd89c8970de1a5ac94320b514a078055edca5eacbdc97bcf2fda2c20bc06417bdd7ecf74a9b510a06cc87fb603d41477a9555facec157","ssdeep":"768:mUwqQ7yuIUHXQYrnVvc3fkOpvJwh9+8NGj4kthRh4apkXtSkngaKEGzXzwKl9D76:nwqQBzAb3fpS3GjptrpkFnYzjXW","tlshash":"1333023f4566e2de2f168b3228db883625c0efd51e49e221cc15b9ed2d2d21067473de","first_seen":"2025-09-13T15:32:30.79209Z","last_seen":"2026-10-11T13:42:49.306381Z","times_seen":1041,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/4e1c87b7aa9e2f2f-s.p.3o02-8iknf6dl.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.020Z","timestamp":1791045395020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/4e1c87b7aa9e2f2f-s.p.3o02-8iknf6dl.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"7ae4-1a0f20a4e70\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8IU5xwi%2Fm5LfvpuuL7OSfq5TqJPdR91ZCTroG6GXtpGtw6Xc1QudUuYXGXX2%2BLCxzx2pmbv9%2BN9EeBgSHo2wkw3ViueCOR2Os%2B7HWu6HimbGoG6MMjYXhXc9tbGzsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6ebe05a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31460,"size_decoded":32229,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31460, version 1.0","md5":"4cfb17abc7db68aaa8238fd287c60c96","sha1":"3e88c0f88882d604a53ea1f2c57878bc6d65f790","sha256":"c3880f0c5afb7890a102bc4b9c8257703664388f708b4be880ec5f5f68e8ea9d","sha512":"3f5c914ff6ebbae0331dc7d99bde691dba75d6bd6542a77b228cbd9878b3034901d45bb86114c1d3ca98302a7feeff302455330cfca4ee452dc6328e792647b7","ssdeep":"384:IQuaoli9B4oDLp1Awb1u+ayRmQcSlyylpzpZFMY50tj3umY5BBauqvExHC+S99Jx:yaoli1DLbb8yM0RztGAaujfMJtBoo","tlshash":"11e2e1c97d97ac6b90fb9cb183e7188187fc541ed94a29cbfae8f6087640a0d44ee501","first_seen":"2025-04-26T05:32:18.11947Z","last_seen":"2026-10-11T10:55:13.908216Z","times_seen":930,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/224qnohvuryce.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.050Z","timestamp":1791045395050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/224qnohvuryce.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BK%2BJPXx0e8TvK3l1TsY5EMX5d9oijguIug8CFP7%2By%2FmeJ%2FUwOMhrITbIYyOCMTsU8grpcHI2YGQ8UoIogoRn%2BK8DBEOj6CIL3G1nmRH9AFWJeWU0CUY%2F5R69gTEAQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"53048-1a0f20a4e70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd71bf45a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340040,"size_decoded":118033,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57289), with no line terminators","md5":"c6435a396957203b9c8d47a21c109a48","sha1":"45c62656188eca3c4c38421f736a65ee18942135","sha256":"cf9ebee2967779a7b89d1594abe62938b875952d8b46195ab0c57b0c75c44682","sha512":"17583188e01864d3c9528bc9a8f2c7d7f648d740d0f79e0d98d915affe375b1cbf26b6b10e5734d9655daf55653673f6f1fd79ceb9400b6055e96dd9053e490e","ssdeep":"6144:x5Ijbk+eecHYpqLjfYDIMAi5wbB7J+de/xfIcczTBx+jE8xgKvSzF:xic+eecHYpqLjfYDIMr5wbBIcdIcq0Jy","tlshash":"92746d051789225d0553a346f649bb06bded04fdbbaac3534ebe492b32e1438c2bf758","first_seen":"2026-10-03T16:35:36.499147Z","last_seen":"2026-10-03T16:37:10.942532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/3nw0oypld22c3.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.052Z","timestamp":1791045395052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/3nw0oypld22c3.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBZ%2FPoVyCC4tosCrh1dNFvTWYAzw%2FJffHBppFjM9b9DtI42dRKh9gZVe%2FFeCUu8WSxoybqWaF%2BocTx4Je63VI6Cs39932%2Bcf4o6QaqVDV9GytVJk2UcFK3Jz0feEvw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"1611-1a0f20a4e74\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd71bf55a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5649,"size_decoded":2750,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5649), with no line terminators","md5":"c22c06f65a46eb02725e46c1cf1d4f63","sha1":"4d8194c3b2d6293607c1e6deacef1d9406d2d56f","sha256":"3496d868e2c6bfb4da80799a67a92f331d6428b373aa6ad7a9f8f35462e24840","sha512":"10f5ff26260a78ab8bf95b66872b165e11700fe2f65dd55f1087415b7764db47fe038ae5e62e5794edf64250da8f28f5201549313eee3ce06d6aa715d188ae28","ssdeep":"96:UNLxPZ5hqFXf3gXhC2rUXoXRiyURIQR8xKyJKA+cs1N86fNj6brCKhvO+AT63jwL:U/ZWBYfw1wN+cKWho05uHUg7","tlshash":"d5c1f019e109bfedf45909d96a2f900c712f1768cd0e0874b9bc7c9a291c2d1ba53fd9","first_seen":"2026-10-03T16:35:36.507238Z","last_seen":"2026-10-03T16:37:10.944434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/apple-icon.png?apple-icon.2k6fbj0u7ke21.png","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.269Z","timestamp":1791045395269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /apple-icon.png?apple-icon.2k6fbj0u7ke21.png HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSKZVknvOtnyP7L0ekz4wqHFctqtnTVJxwyH448vTw3%2FCurFKmSjqbCIHYcoovMGhW%2FEXq6u6nN0qRK6ATFTH18704vjQTI%2BxS8RzHneBC6UKowhXkppo0z8LWZBLg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nlast-modified: Sat, 03 Oct 2026 16:36:35 GMT\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd87c5d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":3864,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"4bc0162bc2de228a440969592202e320","sha1":"b4f92884cdf6160d703c401f879927ac61e4806c","sha256":"ef3e805aa04a76c67fdb07d70e939da5a05cff00d32b7a1f30f97ccf8d745f88","sha512":"fa611a1bd42dfa9215a1a8a8f296d4158258d86e0bb02238fe11d85a1345c4ad338e17433fe550942fc478666083e768926e323b062461bad3a3e8b730996200","ssdeep":"","tlshash":"96516df7255127040af1ff35b31eea1096a7107614e2b2789510f926bd65171e28a39f","first_seen":"2026-10-03T16:35:36.508385Z","last_seen":"2026-10-03T16:37:10.946538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/api/support","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.362Z","timestamp":1791045395362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /api/support HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OM20%2Fkf7VYi6wpbpuH80klAzbE8oYkV6pAjv5suVPxEIp51z7642WaesoRISeVcIve8u0rU%2FXz69lFxMr82Lt3R%2FrrF1Pig1weNjJ8tpXNMuJFmKjhVy7xlQca%2FdeA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd90c855a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22,"size_decoded":835,"mime_type":"application/json","magic":"JSON text data","md5":"4a0622f3ce23e40a2f34aaa027ca13a1","sha1":"7ae9ea526b580af73a043cc0bfc9037b806c8063","sha256":"b2dee6c06a39edb590c770d0389fe800a35c0f8f3b4b3cb52d1dfc9a3aa878af","sha512":"b0d2c31e5bfdb0285a1a64c787f47206e7f19b51d49a2501e87fcb675c8bd528919531b753e99128f02b0383c6c7fc272ccbe26cc3b326cad0c3fd038709fc3a","ssdeep":"","tlshash":"797000002082022e00028a8008300880a2a00c8020200e002020008a0a08a038800208","first_seen":"2026-06-10T13:32:28.559022Z","last_seen":"2026-10-05T20:34:25.048252Z","times_seen":20,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/turbopack-0iwplxx1ahl2u.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.044Z","timestamp":1791045395044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0iwplxx1ahl2u.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryisfGF%2B%2FDst6emZnzDIt53KXrm4XZUud3gRyvUmDVf%2FvR905tgtQuCrut4HItt9p0lkJJ0pJMIecyEDxrwg3Qrp5nWVOV6lBMla69llad8QoUqHeoEH2iyKjF%2FgNQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"2ac2-1a0f20a4e68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:16 GMT\r\nage: 72438\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd70bf15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10946,"size_decoded":5123,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10946), with no line terminators","md5":"06287a39db86eac10d5429ef849747da","sha1":"f47488c5ebb9ffaf927a5f748b61cb606a08cfce","sha256":"b644c1a08853caebe7145cc87815e3695d3ad86cd49f0ecf63af4373ed246712","sha512":"dc5aef0926d1ea3f02ebabfa2f56d777ccaa9083d3bbbec8279a60f8cf6ac8aa2a303b3986cb8cfd01ffa2c6dd748816273269b4f53847a38797828f297d16b2","ssdeep":"192:g+qdHpo28YeEsp+/EEJbrcHoHx5iFJRQBT4fIopDDhJWoVaLEM2:g+qdJkQrcHaiFYqIQv+TI","tlshash":"bd32d7da3791f43343afa4eac07b5040f2794469082e542cd358a8f738740aa86e7f67","first_seen":"2026-09-02T20:46:19.64965Z","last_seen":"2026-10-03T16:37:10.949966Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/en/login?_rsc=ry-B8umWgNEV4JR9","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.390Z","timestamp":1791045395390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /en/login?_rsc=ry-B8umWgNEV4JR9 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:36 GMT\r\ncontent-type: text/x-component\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u2W9CxXC%2FU4PB7qwrz%2F7OpS8ZEIYdkIphMGOKEOqSIGOuZgY1UDjzZM58r6hFOCsQTIXyf97k9KmkzyHLkRWieToLEX4AA3qqOg8XlpnXydusLBj881cHmZc1HmEmg%3D%3D\"}]}\r\npriority: u=5,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd93c8d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":1123,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (361)","md5":"c9a02b462f259db1be336268e564c63b","sha1":"56e5ee96481d98bc5de9d77b8bb488ebb116f090","sha256":"42dbe513d9ac902683cf399e924898d679b6157e4d4fc880c24be358656e3a89","sha512":"cca7e2744ae26ac81c311d7f673da8266cdd4d1b49e22cdcba6cff749f00542e9972ad6d227fef78459dee47a62b6bc8247c35138bab685bc3db7cecc2e2cfe1","ssdeep":"","tlshash":"9de0df260d0d04b349bf26f0882ca48a204edc3323c408f0c9921e1f3fb1732a7cb59a","first_seen":"2026-10-03T16:35:36.486725Z","last_seen":"2026-10-03T16:37:10.951151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":741,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/en?_rsc=1vwYfVB7_E9t4fEj","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.391Z","timestamp":1791045395391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /en?_rsc=1vwYfVB7_E9t4fEj HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /en\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: text/x-component\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wByy9HamhNJThG0A0ODDfqIq8DR5WunGFUGXOXvl8eNrNPED4VYbhP%2BdfJgjzpGkdB1h%2FlmMYA0K3ovkyDbZ62Oc9%2F6bcdcOKI6efiFFWBkZ%2FnQmE3ORZxt7%2FyzaqQ%3D%3D\"}]}\r\npriority: u=5,i=?0\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd93c8e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4620,"size_decoded":2384,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (3617)","md5":"e6a62cc523d9b4e30055b42b35b3dc1d","sha1":"aa9287b8d5df23a8fba59882d4a38dc5024d0cfa","sha256":"70d3af3ff4152e071a1502bf71a177cab2feade4e754f193ac1cb732e5aa9770","sha512":"6594d1813227716b3907f3389a2f8e9ac8bfa01d5cfdc3556678961424504b975c5b4d82f59a3c68ebbb0329bba52f8e28d3229505e85734b61b587686e3a4f6","ssdeep":"96:WW7nNe/InhInk6ZlO2CHHVk6ZJBida7S7qy7Hf7u/41u5+FDDek6Z9Eoq8V0:WW74/bk9jHHKgBida2Xbfq/41u5ADD91","tlshash":"cd91ac7feb118c3eebd746c8209f3206a18d532bcb98ad37ca4d0e0605d7b5a1d563a1","first_seen":"2026-10-03T16:37:10.952805Z","last_seen":"2026-10-03T16:37:10.952805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":666,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/16d91c780434f2ce-s.p.0y1w0k24nk0rl.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.016Z","timestamp":1791045395016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/16d91c780434f2ce-s.p.0y1w0k24nk0rl.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"3dd4-1a0f20a4e70\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLmwNHr6RqSswKyyPoIARQQSV6Ho8e8LAisqNIRAG86cR7QBlB9Tt23MBMe3NrQ06PYHfixO50a%2BFaFu73jTUnjEtrQiko01jnCDuQDg3L%2FJ7%2FgDkAqJpK1ONVpLug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6dbdc5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15828,"size_decoded":16595,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15828, version 1.0","md5":"d1abf183873c88f173b980f77fb8c349","sha1":"9b1449528242cb81b30664c2ee5b4d4aae809913","sha256":"c3f4223046fb9623a0e92414d2834745cbebb260742e049aff103018b991fd47","sha512":"d2f6a93b36d202c4267df99467c22bc6fc916fbf1c00aab7e9815bde2268252e7a0313a04cf3724ca6c38f3f6a93f2cf5845600b924f8a403fa0634a49728c00","ssdeep":"384:c7hKl2Mmi5OcOF//hxMz3WGYKud5VkHbcUwAHLxRkWyS:cwltmi5O3jMaGYKyUHwUwYLwS","tlshash":"2462cfbcc8ec44cd7f6af1e511bd80b484a2d2f7ace6b2b79240421d597622e750c67e","first_seen":"2026-08-31T03:39:55.39008Z","last_seen":"2026-10-10T08:40:49.781377Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/2mmpezlrfmbu5.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.036Z","timestamp":1791045395036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/2mmpezlrfmbu5.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qL9A6i73rpzUoRKFCQXpZ225hm01VfjLS7tpSWlggUxHZElIYngWcWqWaTjezLDDOyDCn108a51zPVhlo0mmZu6hnEA5NrKtMcgQPP%2FAk8O353oWWkKHDsNTbqflFw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"879e-1a0f20a4e64\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:16 GMT\r\nage: 72438\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd6fbea5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34718,"size_decoded":9532,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34718), with no line terminators","md5":"8ddd54b88a2ef9a832652aa9f3eb6c55","sha1":"8a24058fcf153ac142c04454d12f8cbbec40936b","sha256":"91f598badaed9141b1c267e346cdd724a023add2b14f3b6d5d8e7b280825c172","sha512":"15518f6dcf3bd4268861330f1bbad39366f538680ccac05df9b3eb0aa77fa9d449c675d7b26a98e7e432e43d22cf6df5a17826b3ab5ca7b26f793b4803212c38","ssdeep":"384:YH1XC/xEmbSwXpNC8veOr96PLsyNYK21x6jnbt1k6ALEDwSpQ6MpkbbG3:YHORNV1xOZ1wE5fMpwG3","tlshash":"8af281a572d5f5d1139784e4843f401af23d0d7a246db0a4a3f2ccea79e094dd172faa","first_seen":"2026-08-04T05:27:48.559748Z","last_seen":"2026-10-11T16:12:21.96383Z","times_seen":771,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/chunks/3byuobrkyz9bj.js","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.040Z","timestamp":1791045395040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/chunks/3byuobrkyz9bj.js HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAObpblurIKumKWL%2FKMVegRyAIqGpcikbNV3Itgexyxbdvg%2F7Y5gigtQX0SJxzGcrjUBhrz21PV1O1RcZtIQlRH5cC2GZ9ozfzPR1D3DZVPf9VLrLbi4AbcPuVPjkg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"37f24-1a0f20a4e78\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Sat, 02 Oct 2027 20:29:16 GMT\r\nage: 72438\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd70beb5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229156,"size_decoded":72447,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"72131df718ecdbf8c8f74f92d8293197","sha1":"4c4f90e10430d556c767c7b76fdc238c94c1d0b4","sha256":"2998459ef0c506d9417d5337fd7c562b13913d9eb939016648e0352c0b037eb2","sha512":"efe8bdb598bf7b2d11381887fffaf9e07c50e43516b53ff5817c94328cea39048f05b26fc1e61f845760e012ae59f2aab30f814f9622fbd6048ca1c6ce36f43b","ssdeep":"3072:nLt1U+Rn+36F3viSRoB8hoS4kslUkRgjwzeDRJcWvR:nLt1U+Rn+36F3luloQeDRJcWvR","tlshash":"2224fbe83955f6626ab302a710af1803b338252b280d4d60b311fdddb57845eb17bf9e","first_seen":"2026-08-26T19:38:37.009311Z","last_seen":"2026-10-11T14:19:12.068565Z","times_seen":470,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.252Z","timestamp":1791045395252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.1bkzbscqrt8rl.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"7a6c-1a0f20a4e68\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vE4ijiR1kL6vPszbrSxou3XU0A7HqZUTLwx0bJZknMCNHnHUJbpC%2FnWUst6ifPGNovZA%2FfJCu53pm6%2FDc7NT6RfZWJLF%2FPzy0xUUXwL0%2FeJGJ1yAER9IeJAGG2LJAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd85c545a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31340,"size_decoded":32111,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-10-11T16:29:53.878774Z","times_seen":4350,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thermai.org/_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2","fqdn":"thermai.org","domain":"thermai.org","tld":"org"},"ip":{"addr":"172.67.177.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thermai.org/en","date":"2026-10-03T16:36:35.255Z","timestamp":1791045395255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thermai.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 16:58:38 GMT","end":"Tue, 08 Dec 2026 17:57:26 GMT"},"fingerprint":{"sha1":"13:BA:99:FC:CF:AD:F1:CA:FA:F8:0B:D9:25:F2:54:0C:DA:F9:61:09","sha256":"F9:98:FC:DD:E2:A2:EF:C8:78:08:25:9A:EE:B0:C8:93:31:52:1F:57:65:CC:5E:C0:5E:3B:03:22:CA:A9:5C:D8"}}},"request":{"raw":"GET /_next/static/media/8800dfc60902df36-s.p.2sla2yow9-9p_.woff2 HTTP/1.1\r\nHost: thermai.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://thermai.org/en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: therma.locale=en; therma.vid=77da2c3e-d6f9-4bc3-be40-413d943fa01c; therma.src=direct%7C%2Fen\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"therma.locale","value":"en"},{"name":"therma.vid","value":"77da2c3e-d6f9-4bc3-be40-413d943fa01c"},{"name":"therma.src","value":"direct%7C%2Fen"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 03 Oct 2026 16:36:35 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 30 Sep 2026 11:19:16 GMT\r\netag: W/\"8410-1a0f20a4e5c\"\r\nexpires: Sun, 03 Oct 2027 16:34:54 GMT\r\nage: 100\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIyHQJ%2FGfwhaH31%2FSwEfyMNcTXs3Xb5%2Fug2RYT1M306ePmfsVdy4%2BQUU%2FZh04s%2FM7unr24o7fwbsyBr3adLpolDEnUMpAZp3rrHhClPJ8sfi9qbA3Wibp7%2FnZEl4Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a44d5dd85c565a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33808,"size_decoded":34583,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.0","md5":"fd7dbbcb3633b5980282063dfa5b321a","sha1":"324d4be3f27a44620f4df5acbeb62b8cf4fb1e2a","sha256":"cc61cbd632bb677cd55f0eec9ebdd3e1525c5f30904cbf0769e2ac50d0fba992","sha512":"3bc5800d775e9b09edaf91015a2320a88c15c668acdcb49c209f2c768bbe4e0f4a1501b985dfef3b009e2c81510fcac8752c9e9016ab5f78941292577d9d6af8","ssdeep":"384:SdyvvujXpJ8JSRwAtLj1R3AyL0tqXHsNBESOGXTWn+W5U8EYLw2cAycHULV36ENm:ShvkSSsj1wW0YUWLY+O36ENkI0KufR","tlshash":"1ee20265c88f6e2353e8dc7299c9b45c1ae5c90f510a1974bd84f620ef71cd7c57a202","first_seen":"2026-08-29T14:48:06.18876Z","last_seen":"2026-10-10T08:40:49.709962Z","times_seen":78,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-03","alert":"Sinkholed","trigger":"thermai.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}