{"report_id":"10e1f85f-6480-4eb0-9d3f-ebcc196f7fb0","version":6,"status":"done","tags":[],"date":"2026-02-14T09:51:41Z","url":{"schema":"https","addr":"pf-card.icu/","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"104.21.73.171","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pf-card.icu/","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"title":"Flow - Início","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pf-card.icu/","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"104.21.73.171","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T09:51:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T09:51:19Z","timestamp":1771062679,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37320,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-14T09:51:19.679124+0000\",\"flow_id\":132389239458010,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":37320,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"pf-card.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":913,\"bytes_toclient\":1654,\"start\":\"2026-02-14T09:51:19.657626+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cloud.umami.is","ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-18","domain_rank":524054,"first_seen":"2022-11-15T19:45:49Z","last_seen":"2026-02-07T21:14:09.014196Z","alert_count":0,"request_count":1,"received_data":4092,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-gateway.umami.dev","ip":{"addr":"104.21.29.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-11","domain_rank":261649,"first_seen":"2024-04-27T09:44:52Z","last_seen":"2026-02-12T17:21:05.571614Z","alert_count":0,"request_count":2,"received_data":2456,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":1,"received_data":8704,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pf-card.icu","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-12T23:11:11.697076Z","last_seen":"2026-02-12T23:11:11.697076Z","alert_count":31,"request_count":31,"received_data":4018805,"sent_data":13620,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pf-card.icu/assets/AppFooter-C0fSb-C1.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0a77359a55d1068313d68b45e8ceb72a","sha1":"341ed0fc29b20e0c682469a513e6dfec5cf34c8e","sha256":"2015e930e93325f0030ee295c108dab62adcc68f5d7adaa9e25435aff8fd0096","sha512":"ac36427964f2463192d7dc3ba77e57e1f7b06c1f35b94f21277cbc0cddf561a5fa1fa1344e21705814ff8abbed2b09c8bfa205d77fcd95783d8cb5e12865a4c1","ssdeep":"","tlshash":"8ce0f1aebc50a4f4c26720ac633018010329f9fa7778c5fbbf681139626a5b1dd6d700","size":414,"data":"","first_seen":"2026-02-12T23:11:17.195608Z","last_seen":"2026-02-14T09:51:45.781231Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppHeader-BNIIfFaF.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"026479553cd5b7ab76ec0bd031474cf9","sha1":"30ebb069ff5dd641f476fc99dd49c02c3db71c36","sha256":"e4b87c9ce08f46f24babc931ce56035dff54d03206af5111bb8104531de41c98","sha512":"37d5e837d4cbfaa9d096d29208baae6457400b76093fb8c427faa3150c9d70f2250e135e1f5cc55fdd9aaf5d11c15eba6a3bc782bf1f42215cfef3f6bbedd952","ssdeep":"","tlshash":"4c41a61c380ab774362b4a64885bde4433191bafb2109c82d2b80c2d24e1db8bb9f758","size":2296,"data":"","first_seen":"2026-02-12T23:11:17.203113Z","last_seen":"2026-02-14T09:51:45.780374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/lottie-CQ1wq1zi.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d174b34e1e1436d1cb798166dbf2569a","sha1":"ea9d80a34a0abd66e595df2dab1bb2498a65b4d6","sha256":"7a098bffc4fb59c8fa4771f96cf6ac9cab5fa5197c13d000fad50ae315162dca","sha512":"8bf974eda3ef59794cbed8e4afc47216ee4bd491221f7c98c9b5033c1d36179b6eaf62d038339bb40c3a22bc262814fe92ef9b730bc671bbf696be949132099c","ssdeep":"3072:sjspTeDxaIrfHTfSWfHBXwP+WMSKUAjcIyGnrSTc+yP8sTS2hEKzf6MPID:sjZxaIrHjS8HBXs+D5UjsO2hBfLs","tlshash":"086429597254243906c54069806f0a4bb733692e246ac45cb72cf4ffacbde8d31beb79","size":307428,"data":"","first_seen":"2026-02-12T23:11:17.214374Z","last_seen":"2026-02-14T09:51:45.789474Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/applepay-cCvBqq7m.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d22de6ed370d68e5984c35ef88e65a52","sha1":"f298bf0e4bd927b5da9b820ff47e385a6bce528d","sha256":"ed83a1805565c843f1451a867bbddd4e25ed35bdbfe0df08cc0f18ec177592c5","sha512":"1dafa1a6e2fef09a8b961375cb3cc72e68cdf4b5089025a1f979202d4ac18968bab170ced22805b4a1e82916052dd924c355a2761e8764a10ffed9d9da30d323","ssdeep":"1536:qXf+mdaI2Xjb6P/OcXq+CzFc8x+1Tu8Y5wBl6vHiM46DoOViA6wHIa09e/kE9/:GCbFcXqxzFc8x+P809M","tlshash":"0093299da124b53782f75a8b8365821172b14d88b808c8e4f1ed4c7b496e95813feffc","size":93946,"data":"","first_seen":"2026-02-12T23:11:17.206728Z","last_seen":"2026-02-14T09:51:45.768607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/LandingView-poMnXtt7.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45069a8c2e82a2f007844245f398a0e6","sha1":"1b7a57b52113e07d147b1b41cb777bb03fe2d381","sha256":"c23570fff5a290914bd436853387d5225fbf1de972b80957a64d15a5a3776e8e","sha512":"5b7e96ef3b43d70b678d546e4b578da6bb4a63e727f63461cccd3b5a2041a500d46db158d95fe6ca25ec368e611d62884f49d85f973b55fac19fc7a75a3f7099","ssdeep":"12288:+TIfTIfTI4TI1TIaTIJTInTIwTIXTIBTIPTIFE2Y2sufHIqYLzqpKhf+KS9ezyv6:VEuhEb","tlshash":"fce485ad4ba601ecaa506cc5ce9730a08fe582536fc74dfcdaba6d1417a56cf2301e35","size":678884,"data":"","first_seen":"2026-02-12T23:11:17.187335Z","last_seen":"2026-02-14T09:51:45.753206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"717b9f09053630082775f52599f8be98","sha1":"a051a2dea51111bbb098a0cf303d9dd563cc12b6","sha256":"c1866fe32eddb9d8ccc0178860a54acfc6dc19ff7c43faeb2c93d99214739f32","sha512":"911aba8556df08026f7bfbdc98759bf337ccce01d4317394e177b7edd7cd65a6ba4c0933352ca03578c36702750d0b24727ede495adeaa5e643f14371a501fca","ssdeep":"","tlshash":"daf0dcae2c83b46733fe263dc327a6aa2762070368c2d505fa46c4142fd49961c52dce","size":488,"data":"","first_seen":"2026-02-12T23:11:17.228616Z","last_seen":"2026-02-14T09:51:45.790525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33ffbc4a5cf408b782282621f2b5dd50","sha1":"55dbf5f345b86cd4a2e6d1daf67823a41bb9e599","sha256":"f8e66057b1eed7a2c8ea5d159aacbab38787fc679dc1b71ec6d22a0b696441e7","sha512":"e0d6a07d41948cfc1da1e6c4d5cba67edef6f62b80334e9e4a209f35d27d293b32c074f39054d9b30bff011b3bd5e69e9e2986bdad934ef56e0747709bec74f7","ssdeep":"","tlshash":"6be07d1d30c6003962b3546623f7410625233b0fd44dcb13795fc4d55f24c51050654c","size":321,"data":"","first_seen":"2026-02-12T23:11:17.230463Z","last_seen":"2026-02-14T09:51:45.791623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b0370b3ca09c7cee1d9812c9c11fc1","sha1":"24edf69a5ac397ed0fe72cea720f005a055c2b70","sha256":"95f8c65a2c5486ea5c21603e26f41ab2545ff9cd05e0406a4cad8469888637a8","sha512":"bd44fc5b5a55ba9dff6ec19515ae03786a3ee9a0facf9708570364f6848846c7aadbd9760a11c5696cadb10bf859ffc4a59977a4f19c4e26c4eb83906afc07ff","ssdeep":"","tlshash":"4e51b6f53185f0f17f692890d17aa620b93a2e72b81a48d0a6ff4c572a3e50e9431d29","size":2700,"data":"","first_seen":"2026-02-05T07:38:21.809415Z","last_seen":"2026-04-30T23:57:40.384571Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/main_logo-DkewlB9Q.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cb40cfeb3ab534b3f0a71546a01534c2","sha1":"d8c6ea1fbc878b66b7c44119b45d6bf64e715d52","sha256":"6b9003eaa25aae9940f4ccf47a10d4df99ac90c4f3394e2904751e4d810e78b7","sha512":"0de28308bd4440b0f08fe5f87c6b94136cf236cb5b1e7489e90bfd049b93ca2f0edc19412a60ccc61a584861a7634f7d1dc2c99f3100d0b81ff398cda2f64e6c","ssdeep":"","tlshash":"3090022d5448496540b460a86663b85110202a7c3559535d5924914527e18508c4d934","size":57,"data":"","first_seen":"2026-02-12T23:11:17.196513Z","last_seen":"2026-02-14T09:51:45.784598Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/index-XXk8mKED.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b72a5b537ef188b0530fef9c961312","sha1":"45997354e43fd803557076f7524d514c5305bb0b","sha256":"efa637076c340d05833e8b75d3548ac01ca4e7a5ac53dc24995bfb9fb7dd3cc0","sha512":"7d07a396eaa65e6d57b9a1135350e005565bba7b9f2c89e0ab1f7b1f851a4d3c18175dcf7a7a675adf1028ae05bced8a314ba4c997077ff2b403cac466b09748","ssdeep":"3072:6nReuY5MT37RM8Zo1ko2N4ds546HxZ8D0f6OPibDQ5s:6fj7O8yTsW6RZ8D0f6OPi/L","tlshash":"9cc328e53286b4a153fa09e6407b1006f3792949384ec8e4b16cacdb3d7394991bbf7d","size":127595,"data":"","first_seen":"2026-02-12T23:11:17.226205Z","last_seen":"2026-02-14T09:51:45.778942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/_commonjsHelpers-CqkleIqs.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3fdc400de2323774f9ca96898dc36065","sha1":"ae41a006281ebfc75eba0ea2ce69d20e7d99d65d","sha256":"4c81dcd54e7e877a79145c4c6fde30ac0e8d857f412b73f48f6970e5d7eab938","sha512":"002bcbc0b7d7b285f216a6e3ab5a9ed6197e04d2f94f28801502b5249584b1eb094bb6826087b8bdeec4da68202d43344b7d277f50af27f4f6585e06a91ce94b","ssdeep":"","tlshash":"eeb012887060e6f443d91d7a5033fc06d66e6c1c437f7ac083cd89f133350d51509a25","size":116,"data":"","first_seen":"2023-06-02T11:45:24Z","last_seen":"2026-06-08T03:24:32.478861Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pf-card.icu/icons/192x192.png","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /icons/192x192.png HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 15509\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:13 GMT\r\npriority: u=6,i=?0\r\netag: \"698b1afd-3c95\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Weh%2F8iHEKeVdJkkxs8vSMP3fq9GPL1svwpJ5DeJb%2BW1ICpwMDrVmSArv6T%2FPZ9vWRMiGNc5Nm1cXY4RZnGeV6PhUgLfMgSHv5faZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbaa9948ea75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15509,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"5d3e1bc97cb5ee1c14d2ca9934aadd4d","sha1":"e014bbd107146f167858df2f9c45a8d1df4d2430","sha256":"3bf7f0464cc13145bc3e2f78be0e27be431650c3fcee0ec144ecad444e5287ce","sha512":"833052865f4f51bdc1401fbcaa31487a7e33572fb6ea33426eb36270ab864cf0923f35fd039eb2fe7d3ebd83540363d34da36086c4a3a079f520375963539d2b","ssdeep":"384:CFBqCaOj3HpNqBwJhP+ModjFEjxg48WFqzk57N3K5GpdW8mp:CaClMwkaxg43Fqzg7tKwNe","tlshash":"fa62c00d933cf17629d9b93f1e21646ac474610da881d74ddbd4eeb1a17b21c61c2df2","first_seen":"2026-02-12T23:11:17.192469Z","last_seen":"2026-02-14T09:51:45.749407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/LandingView-poMnXtt7.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/LandingView-poMnXtt7.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:19 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWq%2FcJLxNYFr2hqn8A4RLQd4NCDE%2FIgMQEHYqQIVOBfoucI3uSFZJ9wWOadad8J2w6r6tNryP4hqbvZAKCau%2FyxeHx1xIDZJe2UG\"}]}\r\netag: W/\"698b1b03-a5be4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa977c0475a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35098)","md5":"45069a8c2e82a2f007844245f398a0e6","sha1":"1b7a57b52113e07d147b1b41cb777bb03fe2d381","sha256":"c23570fff5a290914bd436853387d5225fbf1de972b80957a64d15a5a3776e8e","sha512":"5b7e96ef3b43d70b678d546e4b578da6bb4a63e727f63461cccd3b5a2041a500d46db158d95fe6ca25ec368e611d62884f49d85f973b55fac19fc7a75a3f7099","ssdeep":"12288:+TIfTIfTI4TI1TIaTIJTInTIwTIXTIBTIPTIFE2Y2sufHIqYLzqpKhf+KS9ezyv6:VEuhEb","tlshash":"fce485ad4ba601ecaa506cc5ce9730a08fe582536fc74dfcdaba6d1417a56cf2301e35","first_seen":"2026-02-12T23:11:17.187335Z","last_seen":"2026-02-14T09:51:45.753206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:19.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:45:05 GMT","end":"Tue, 24 Mar 2026 08:44:52 GMT"},"fingerprint":{"sha1":"83:8D:08:60:A1:62:9B:52:5B:D9:73:64:FE:B8:C3:57:C9:CD:49:7D","sha256":"A6:63:DA:E1:52:5F:EF:4E:CA:15:B5:6F:1D:11:D1:5A:8F:9E:4E:C5:57:A6:BD:F7:8B:91:35:6E:39:CB:F4:70"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cloud.umami.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1537\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 11304\r\ncache-control: public, max-age=86400, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors *;\r\netag: \"a1e75470e626003713b18b1f1e721148\"\r\nlast-modified: Tue, 10 Feb 2026 01:52:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /script.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::jgxbz-1771051375536-014f7f339588\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2TLmuMIQBLuUoSSoh8pIOEHcuMpvGFPZdM6ZPuQh1yOaR1NdutWguY1E4lYbgJtmpGHjzUCy5jibe9MLW2RTzRvoyORzRBTaTgFKoI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9cdbaa95ca3db1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2699)","md5":"97b0370b3ca09c7cee1d9812c9c11fc1","sha1":"24edf69a5ac397ed0fe72cea720f005a055c2b70","sha256":"95f8c65a2c5486ea5c21603e26f41ab2545ff9cd05e0406a4cad8469888637a8","sha512":"bd44fc5b5a55ba9dff6ec19515ae03786a3ee9a0facf9708570364f6848846c7aadbd9760a11c5696cadb10bf859ffc4a59977a4f19c4e26c4eb83906afc07ff","ssdeep":"","tlshash":"4e51b6f53185f0f17f692890d17aa620b93a2e72b81a48d0a6ff4c572a3e50e9431d29","first_seen":"2026-02-05T07:38:21.809415Z","last_seen":"2026-04-30T23:57:40.384571Z","times_seen":380,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":44,"dns":33,"connect":1,"send":0,"wait":8,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/index-CtLI7mPK.css","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:19.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/index-CtLI7mPK.css HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:23 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FmtjlL3YfxZZ9Nwjm9JJIqRnUrWC1PJu9gbztxptDjsFY6C2KAaOK06dDg6nlCMOjGC8De5fHHao7KTxs9g7E5jXXDCE%2Fabm%2BXC\"}]}\r\netag: W/\"698b1b07-8402\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa958f1f75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33794,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33793)","md5":"4b46503bb9172de4e58ec6c55b5893ff","sha1":"c6162403fd3f011487b7653a88f2b8ab23958ba6","sha256":"7d6d764dd831e7d0dba43b07cb82c1ac895b71f4241e34b7f514a3aa86bbca94","sha512":"5f07de46d757cc86be58733a37c17d8db0a32b4be67f01221577a4c9a2d1a6039cc8d5eac8f085ca110f4edc75f161ef89a0f510d37b01aa1351a84475a5a9c4","ssdeep":"768:JwCHfN01+E7MJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g0O:yCH1y+CMJihoCcZCOud8G8tKS65wqsZK","tlshash":"3ae2f15a7a4cd100bf435b4762df6e5c15347588e530198abe2e31ca1cd2ce6ba73fa8","first_seen":"2026-02-12T23:11:17.197372Z","last_seen":"2026-02-14T09:51:45.757835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/api/maintenance.php","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /api/maintenance.php HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: PHP/8.0.30\r\naccess-control-allow-origin: https://pf-card.icu\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFiD4SSb1RO4TVWHkqO8rCGcpSF%2Fzl0o0cd7tHFKKy%2FaGgolOHQeD5bUVj%2BgvYe0%2FBPsncRT%2FJkoWCt8EZRxq2kGZC9nyG9YIslV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa970aca75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e1610ef8b9192f7d4a7795ccba654c3","sha1":"27171ac0a0c08b67aeb41a31817b5de6861e944f","sha256":"e3f0af98e95af00f59f0285a4f9aecff37210b057c8e7760227864aa1459026f","sha512":"a98b374656d8f75ff071fd926c7f0503bd15f173112b9ad76cc2d4bfe4e258075e403d8c084355e563ac29ed90cd090334bed6211c68c6335ec5667f23f30b21","ssdeep":"","tlshash":"7b700000022088882208c3082202230200000022a082e83880208000a2e300080ce008","first_seen":"2023-10-17T23:40:18Z","last_seen":"2026-05-08T05:43:31.11339Z","times_seen":394,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"104.21.29.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:13:29 GMT","end":"Wed, 06 May 2026 12:13:18 GMT"},"fingerprint":{"sha1":"FA:87:3C:DF:4C:D0:B6:8B:A0:C0:B6:84:77:CC:66:8C:8A:31:94:D3","sha256":"17:AE:89:5C:EB:BF:EB:42:BE:0B:FB:17:88:9E:98:75:B7:11:9C:3E:7E:FC:04:CE:F6:88:F9:0F:AE:BC:F8:94"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://pf-card.icu/\r\nOrigin: https://pf-card.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: remote-HAM\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Laqw8XKdcbRlldZwIMOIyVGZgjdG4QYV9MfFwS%2FBQEudX0pJrCna2o6u8qijxY%2FBESuZagAb92NcLYLAgYGEwEdSXJxCVOOjWP6DMKMOwkTXJF%2F2wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9cdbaa977db186c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T05:34:20.987672Z","times_seen":16230898,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":61,"dns":20,"connect":8,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/hashkey-DVJ8Af0M.svg","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/hashkey-DVJ8Af0M.svg HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5p%2FjG4WewvTRK%2B6tyk8tZ6sKVrMDK3uB5iYM7VkVx2i%2FwzoZdO5GDAzVKU5%2B6dFoUneeKf3sI2uThKmK%2Bitf2gvSymKthGwqDbq\"}]}\r\netag: W/\"698b1b0c-3044\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa9a2b4975a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12356,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1950db125241a0fec72ffbfd0afc7e54","sha1":"566b33e2d5fdcffe531eb9b89e758f6471805773","sha256":"f850fe383c56821fea9a62269d58f1245be6951d59e85f51aae1fa4b1d18b62c","sha512":"590df19d565e6e94941a58f85b8732224d61d0cf121dc946ede43d5c8a8a6dc99c077058374b8aa77a93f1a8ae0a386f8e40084f6b5abec46659c49a0a8a49e0","ssdeep":"192:yQkT8jKh3jHUVmhnh5Wlrz+u5qQpLnFkXAzyRa6Um7to2PGqWTsrInEYtak:b2jUSh0lryullF2AWhUMOyWKIEit","tlshash":"064285c4b37693e0ec46abb8cb7ff4b12d1714f61a20c0f486f62ea4d95259e845c9c2","first_seen":"2026-02-12T23:11:17.219432Z","last_seen":"2026-02-14T09:51:45.766378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/reseter.css/1.0.8/reseter.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:19.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/reseter.css/1.0.8/reseter.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2345\r\ncf-ray: 9cdbaa95b8318be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"606dc69a-1e10\"\r\nlast-modified: Wed, 07 Apr 2021 14:50:02 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 124832\r\nexpires: Thu, 04 Feb 2027 09:51:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=js%2F2iyf3M%2FSny0HT5%2FOkNSJLWP67HDoUYUfj6sg%2FX%2B2wqKEI%2BaIJbBGjjloG0eH58v9UFP7cJNPBctHvTPEaFLJzaSiGAUy9yamq09n4Gq9RARbEhWraNYKvj76dLribNOt96B0T\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7696,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (7694), with no line terminators","md5":"596cca4012ffb1c1223cc2e90075590a","sha1":"e5eebe1fa336c7731ff8cc812c209cce77d0a981","sha256":"5a0b1dd33f37b015e2df71e6f1e90879eea71a3fc1cb2fc05a6ed55821dc6256","sha512":"c3bb0c10ce72ce6b953fd89cf73a422e4ffec21c2bae1907e60f37c74c22e4310fa35cbefc99e23260957dbb63c39262a45a5c09be20c85db12c44bab5cf93c4","ssdeep":"96:E9SqigssHTIFbb2FSS0ZxWIGMS3pLWX117TfaYSDysde4eN38sBIUy4Fgfk:8Bdss8FWFH0eIGMbXj7uYSDTm38eIUNd","tlshash":"91f1f97b93003564a8778d252bce9b9577202632c5b15678d423ce38cfca666337671e","first_seen":"2026-02-12T23:11:17.208013Z","last_seen":"2026-02-14T09:51:45.767572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":41,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/LandingView-poMnXtt7.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/LandingView-poMnXtt7.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/index-XXk8mKED.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:19 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFNC4bKEBWyrP9H%2FJ6fdpCSAFP59%2BU8oWZ3cCrbLX9NTCiaPAuSjLuKijvH1jqJC88BncKEJHW4%2BKwI3yk5DW7ZCYv%2Bma9o%2B%2BdMW\"}]}\r\netag: W/\"698b1b03-a5be4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa984e3f75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678884,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35098)","md5":"45069a8c2e82a2f007844245f398a0e6","sha1":"1b7a57b52113e07d147b1b41cb777bb03fe2d381","sha256":"c23570fff5a290914bd436853387d5225fbf1de972b80957a64d15a5a3776e8e","sha512":"5b7e96ef3b43d70b678d546e4b578da6bb4a63e727f63461cccd3b5a2041a500d46db158d95fe6ca25ec368e611d62884f49d85f973b55fac19fc7a75a3f7099","ssdeep":"12288:+TIfTIfTI4TI1TIaTIJTInTIwTIXTIBTIPTIFE2Y2sufHIqYLzqpKhf+KS9ezyv6:VEuhEb","tlshash":"fce485ad4ba601ecaa506cc5ce9730a08fe582536fc74dfcdaba6d1417a56cf2301e35","first_seen":"2026-02-12T23:11:17.187335Z","last_seen":"2026-02-14T09:51:45.753206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/applepay-cCvBqq7m.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/applepay-cCvBqq7m.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/LandingView-poMnXtt7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:17 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M2jf4OMhcHdsys1eFU4beZbap2pct%2FWqYqr3o77dW1pU3vQAoFUGSyiQZVngSdIBY8V59jItnDE%2BuqJQUM6Aop6F%2Bfhw2MTAELoe\"}]}\r\netag: W/\"698b1b01-16efa\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa99593a75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d22de6ed370d68e5984c35ef88e65a52","sha1":"f298bf0e4bd927b5da9b820ff47e385a6bce528d","sha256":"ed83a1805565c843f1451a867bbddd4e25ed35bdbfe0df08cc0f18ec177592c5","sha512":"1dafa1a6e2fef09a8b961375cb3cc72e68cdf4b5089025a1f979202d4ac18968bab170ced22805b4a1e82916052dd924c355a2761e8764a10ffed9d9da30d323","ssdeep":"1536:qXf+mdaI2Xjb6P/OcXq+CzFc8x+1Tu8Y5wBl6vHiM46DoOViA6wHIa09e/kE9/:GCbFcXqxzFc8x+P809M","tlshash":"0093299da124b53782f75a8b8365821172b14d88b808c8e4f1ed4c7b496e95813feffc","first_seen":"2026-02-12T23:11:17.206728Z","last_seen":"2026-02-14T09:51:45.768607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/bestimg-DeUD_8iK.png","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/bestimg-DeUD_8iK.png HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 636711\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:29 GMT\r\npriority: u=4,i=?0\r\netag: \"698b1b0d-9b727\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3KQ%2BfeG1TBAR4W3dOIA6i9u%2B3%2Fz%2BJwSGLSaYeLQ5UVvncJm%2BqUUQfLXGhcc%2FozA4o%2Bk6l2XaC9%2BT%2F0Xa3iv31LUCli0v9JxDb4a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbaa9a3b8175a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1328 x 640, 8-bit/color RGBA, non-interlaced","md5":"9cda33eb2fcc2006c814dded90e33b12","sha1":"5d41dcf673adfc57da1a76f4328bb677a2d5f369","sha256":"4b1e46b101a24cbe6edc222bd2c9df85b051c8b5b048391460c217b794a9be0f","sha512":"e8b7e535cbf0af7fa7db1fe7b2177215f8018b9cfde9693a6f377416b6a151ce9033f0c5d0464be2e16c9476d4b6fa68c77dd530026cff4e0984d31533072d62","ssdeep":"12288:L2cOKxrGRwbZ/MRmX9rQoI8doBBAfrWwSzCeGMC:K0ERwbiRmq8dUATWdzCe0","tlshash":"69d433908d164f6381afbd8fd395c38eb101db76eab8eb59ddc6c6a8130112104acdec","first_seen":"2026-02-12T23:11:17.223828Z","last_seen":"2026-02-14T09:51:45.770128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/LandingView-BCOcEqmJ.css","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/LandingView-BCOcEqmJ.css HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:24 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imOikQUm7Poe%2BGucFWP4v75hGJIzDjC6nfKkcecsy32KAnyydrP7%2BEBdTRhCWP7fqmSO%2BgpLMHlDp%2F1GJBkzUIiuwqqt%2FsCKShTy\"}]}\r\netag: W/\"698b1b08-57cf\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa977bfe75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22479,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22478)","md5":"4bffa6a8ed3140131e9d9263f2c00129","sha1":"45dfaeca83a9f33f9c75e5b584ce4b3696f18e57","sha256":"6bbc21125ac61e2ff0782e4389ddd396eb05cde75c028e499a52b13df840aea3","sha512":"24c6eba937680e927e0dcd85bafcffc95d27f5d0ed4e3b05fccba240ed410a140fe0916f3dba558d0dc896d14991f60d838e819b52e6f4061d997192feb64239","ssdeep":"384:8DWdHNwztgHTetNoIL5qWwX+K7TcXhV3hmc0Jl3mmOtZbL1Zw:NHyMewIL5DwX+K7T8hV3hmc0JZmfZv1O","tlshash":"38a25216322e313cf03be925d2e1519c7234b713c7aa87eded5515a54ac76e33b2a28c","first_seen":"2026-02-12T23:11:17.210412Z","last_seen":"2026-02-14T09:51:45.771907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppFooter-CGIBYRkI.css","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/AppFooter-CGIBYRkI.css HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:17 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0Ut%2FrVgzagM0b%2BXyiB3fdHkklssnp2gzkSCQef3OuL8CdeTFrHU4AwaMyeeIIdOOtGEhBGafuIrCQUDTpLhZ64VjRyy%2B5X0XC1R\"}]}\r\netag: W/\"698b1b01-c2\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa976bf075a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"62e3b68cd866fe849807ae6ad4a3b155","sha1":"4e5f0b26a95239f9a61067a3004786c7c427b7d6","sha256":"a47708050090ac6e257ee41a7dc4600a3731382042675f698eb797a9b403d2ee","sha512":"4fd75d75bc2d9846dacc4800ccdbdc8a45a8d7e3e8662c50514cfdcdb17d2408d48fd1c6d6681676e2e1cb6e73772b078ec26b32f3fdb0a9abab99c425edb9ad","ssdeep":"","tlshash":"f3c0227a3411a0b84c23f53682d49c983327bc33dc0663b5b881e22058e33e21c63e09","first_seen":"2026-02-12T23:11:17.202174Z","last_seen":"2026-02-14T09:51:45.773747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/applepay-C2J0D0kV.css","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/applepay-C2J0D0kV.css HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTS0qLcLC1WsIElSQfXFgeBukETeZpUY3w1P%2BWXqG%2BkDx1O6zZHKgc9bxL4FhivwK2bftPIrH%2BBqVMH8xkUlQoph0jHiyCdgMD7g\"}]}\r\netag: W/\"698b1b0a-123d\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa976bf775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4669,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4668)","md5":"e50fd393654d40d99e192914bbed97e8","sha1":"687f0414394f0d0c17c8d6c109c8eb8f2031480b","sha256":"7f4b19c29ec0966f89c5dfee7fbf5d8a83fd3bf8291233e9990957dd08155d92","sha512":"0ed7b7e47bd351a34a8f014d7a547721d062ab67e34a8021d1de2bee05b51daa705b0b70487534e84653c98796ccf30dc584f4f95cb49b182e28772a5d8f69d0","ssdeep":"96:9JToin5dX2TaSWIe+jeHPdw297fzrEIuBk/:9JTJdXCaSte+jeH1ZpbR/","tlshash":"aaa11110d3642c27d1228f286784d7b8b39454b18fd38d6ad6d5ae2cd7fddf0128e682","first_seen":"2026-02-12T23:11:17.194402Z","last_seen":"2026-06-03T18:37:41.366619Z","times_seen":28,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/onramp-Cp9evpym.svg","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/onramp-Cp9evpym.svg HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCqAwl6Pb9YRB8fvTiDmPyB%2FH5Iho3qulniSlRCg%2F0%2B0ViKRkn%2FHeq5KKD7t9RhbLd9qipES%2F%2BVl1omEYZyrYxnkNgqXKUMoqLKx\"}]}\r\netag: W/\"698b1b0d-119b\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa9a2b4b75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4507,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02f5cdc208c9619352809a7201308732","sha1":"58b87e79adb869f38c30b3c1d566c6bf9c8764e0","sha256":"9c877f27ab25bb42b70c5260263392a8ba1d94e80345b6b3a5db870eac8ba665","sha512":"3e73fbe84bb015796c442f1bb06f605b03bb18e812e6fbc26676d7b1fe3559905bf32e4571c1833a5fb48b841818f230bdf2d8fa30401bb01031ffc790dd5909","ssdeep":"96:S6a2+cXPIpg31Ama7ux2d8JIHbKUVXYlk2DJHi:S6+yPIpg3a7ux2d8lgIJJC","tlshash":"e39197efb39922f0f40ee7656a19553b376f3cfa1b170550c2912ec8f5d04940a888a5","first_seen":"2026-02-12T23:11:17.22101Z","last_seen":"2026-02-14T09:51:45.776924Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/deposits-DRx1mYtV.svg","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/deposits-DRx1mYtV.svg HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDM733LkMpFhSwb%2FweIzWQ94Pz%2BVcLFS4IO4j9SfZ%2BWsmtp5KykKhQ3L2wOQRrs7ti%2FcuQBP5%2BVtTN1Kzf%2BcvaO4qfd5VSLq0zxI\"}]}\r\netag: W/\"698b1b04-17c0\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa9a3b7175a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6080,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48901f90aea24a269addea552ef56f9e","sha1":"d63736898a8b37dbfacbbac30bc9a1c52c93e4d3","sha256":"81ce6ed9d644ed373eaa409e8d8ff4c022e0cafbafe5a3e0c0377db202317d6e","sha512":"a1362cc5533d8d5d741281d1f6493ff5bae7f2b03a13d0d185fc667294b1031cc890ad4ed0aa60b9d5cb0040120a25e4bff2fb683215c68b5b800b3613fcb330","ssdeep":"96:83a27ztAj7u7sy7yJLPy1FfQ0/Dw+8Y+AOSVT6+5+EINUWnI7l6:83ntAj7KsOILPy1FfaBY+vy6+5+ncl6","tlshash":"adc1b564635583eaf441ebf88b5ab83037032ca66e61d17dcbfdac58d84520f09e5cd2","first_seen":"2026-02-12T23:11:17.200537Z","last_seen":"2026-02-14T09:51:45.777997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/index-XXk8mKED.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:19.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/index-XXk8mKED.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:24 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvkttIiGaEB0stU1ajMKKq0pPWgqkyIzgVBCc1fPSk2WXigHmCJYQ4kUYjfnz7DYG1ufZaqzCWb%2Fm9qqCZLn4wEK7s0rTmXUnajM\"}]}\r\netag: W/\"698b1b08-1f26b\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa958f1b75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127595,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63513)","md5":"25b72a5b537ef188b0530fef9c961312","sha1":"45997354e43fd803557076f7524d514c5305bb0b","sha256":"efa637076c340d05833e8b75d3548ac01ca4e7a5ac53dc24995bfb9fb7dd3cc0","sha512":"7d07a396eaa65e6d57b9a1135350e005565bba7b9f2c89e0ab1f7b1f851a4d3c18175dcf7a7a675adf1028ae05bced8a314ba4c997077ff2b403cac466b09748","ssdeep":"3072:6nReuY5MT37RM8Zo1ko2N4ds546HxZ8D0f6OPibDQ5s:6fj7O8yTsW6RZ8D0f6OPi/L","tlshash":"9cc328e53286b4a153fa09e6407b1006f3792949384ec8e4b16cacdb3d7394991bbf7d","first_seen":"2026-02-12T23:11:17.226205Z","last_seen":"2026-02-14T09:51:45.778942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/_commonjsHelpers-CqkleIqs.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/_commonjsHelpers-CqkleIqs.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/LandingView-poMnXtt7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:26 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Dq0KvkIKBhp2KyjdTlv5W3qIqNrhQEygbDfWLyL1fR%2FnRUJxPcZ%2FUUrf9FM0sCAB1j%2B4qLCw5acZrD5e89pbx7u8IblJ%2BZiHYG1\"}]}\r\netag: W/\"698b1b0a-74\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa99491375a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3fdc400de2323774f9ca96898dc36065","sha1":"ae41a006281ebfc75eba0ea2ce69d20e7d99d65d","sha256":"4c81dcd54e7e877a79145c4c6fde30ac0e8d857f412b73f48f6970e5d7eab938","sha512":"002bcbc0b7d7b285f216a6e3ab5a9ed6197e04d2f94f28801502b5249584b1eb094bb6826087b8bdeec4da68202d43344b7d277f50af27f4f6585e06a91ce94b","ssdeep":"","tlshash":"eeb012887060e6f443d91d7a5033fc06d66e6c1c437f7ac083cd89f133350d51509a25","first_seen":"2023-06-02T11:45:24Z","last_seen":"2026-06-08T03:24:32.478861Z","times_seen":1521,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppHeader-BNIIfFaF.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/AppHeader-BNIIfFaF.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/LandingView-poMnXtt7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XGKgLrEuAzELXaV%2BLr0xw3k%2FVrnEL48HDFofEFnQrrkT2lTur9dK8fdotqtsVfJ9Y8r0KewcM%2FW9pKzZY1MhfWGKO%2B5w3GWhdKc\"}]}\r\netag: W/\"698b1b07-8f8\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa99591d75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2296,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2293)","md5":"026479553cd5b7ab76ec0bd031474cf9","sha1":"30ebb069ff5dd641f476fc99dd49c02c3db71c36","sha256":"e4b87c9ce08f46f24babc931ce56035dff54d03206af5111bb8104531de41c98","sha512":"37d5e837d4cbfaa9d096d29208baae6457400b76093fb8c427faa3150c9d70f2250e135e1f5cc55fdd9aaf5d11c15eba6a3bc782bf1f42215cfef3f6bbedd952","ssdeep":"","tlshash":"4c41a61c380ab774362b4a64885bde4433191bafb2109c82d2b80c2d24e1db8bb9f758","first_seen":"2026-02-12T23:11:17.203113Z","last_seen":"2026-02-14T09:51:45.780374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppFooter-C0fSb-C1.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/AppFooter-C0fSb-C1.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:23 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WplL7G2aoItEd0hsSuoPubamBeiAkiMG5BZ9UlINwnY%2B6yRJZxm6oP%2Fyw6ypxPxQyfeKiZb5g9lpFAcSOCTqeIvCIziJH2IvoAhd\"}]}\r\netag: W/\"698b1b07-19e\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa978c2475a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":414,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (412)","md5":"0a77359a55d1068313d68b45e8ceb72a","sha1":"341ed0fc29b20e0c682469a513e6dfec5cf34c8e","sha256":"2015e930e93325f0030ee295c108dab62adcc68f5d7adaa9e25435aff8fd0096","sha512":"ac36427964f2463192d7dc3ba77e57e1f7b06c1f35b94f21277cbc0cddf561a5fa1fa1344e21705814ff8abbed2b09c8bfa205d77fcd95783d8cb5e12865a4c1","ssdeep":"","tlshash":"8ce0f1aebc50a4f4c26720ac633018010329f9fa7778c5fbbf681139626a5b1dd6d700","first_seen":"2026-02-12T23:11:17.195608Z","last_seen":"2026-02-14T09:51:45.781231Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"104.21.29.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:13:29 GMT","end":"Wed, 06 May 2026 12:13:18 GMT"},"fingerprint":{"sha1":"FA:87:3C:DF:4C:D0:B6:8B:A0:C0:B6:84:77:CC:66:8C:8A:31:94:D3","sha256":"17:AE:89:5C:EB:BF:EB:42:BE:0B:FB:17:88:9E:98:75:B7:11:9C:3E:7E:FC:04:CE:F6:88:F9:0F:AE:BC:F8:94"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nContent-Type: application/json\r\nContent-Length: 210\r\nOrigin: https://pf-card.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: remote-HAM\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YybBqYCvBqTl9%2FSu7hBTGrak4AznvWw74JhMJS5%2BPxO9Kat%2FU931eEh3%2F7fh02At4wTc2nICKcgNYFQJGRGEHxD%2F7AeNqhuK7Lk8hnu%2Bhxaw%2B8mP9w%3D%3D\"}]}\r\nx-dns-prefetch-control: on\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa97ceda86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c89ef11358ccc9ceab519aaa0611052c","sha1":"59dbdf0bb49f024d0bf90f72d3491a01f9f9c6ea","sha256":"d199e521a614e877b8db6e420d4493a0a8fbb37134ab0f92f2be7e6184d0c35c","sha512":"d1d379387b997df910c0e2455fb010b0889568301300c89d54d2329ed6f0fa0160225ae1df21b6a8b748f04d8646cffc2800671ac07923f61847849ea52fcf21","ssdeep":"","tlshash":"c5e0ab6145b21b9812c26b848c584680079ffbb05bf0a4b665e830259d58ad3708be20","first_seen":"2026-02-14T09:51:45.782074Z","last_seen":"2026-02-14T09:51:45.782074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:51:19.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwZjcbl31hJH4kF8xUXPduy6Y%2FcXWxt6W2QPxCct4yGmBjZcH2rlhHDd0QpC1tUhiaJ8YvsJjOvm8oTQDtmgSOycgTKxUX3n%2Bsec\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa941d6435cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2589,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"59f19c3e19104707c38540bc8f850220","sha1":"b986c101bb8624a70d429f7b015847e2f75dfcdb","sha256":"8ce80982d79abbcf11731bde6a52e01f5366c13acb832ccc486efe52cecb33fd","sha512":"5c1af2bdceed74ebde386ee0338a2a8ea7eebfcb17c2ac07dc648752f09fe5a41591493d7ac5222fc98038f4b472bf59b7a64d3a9e5cf6a2b0237f8695e224e4","ssdeep":"","tlshash":"f1516207dce2a41a33718578eaf2f41d5966260bd545ca46b4ce80a95fc1fd14d874bc","first_seen":"2026-02-12T23:11:17.183064Z","last_seen":"2026-02-14T09:51:45.782821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":100,"dns":68,"connect":8,"send":0,"wait":90,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppHeader-M0yHVkld.css","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/AppHeader-M0yHVkld.css HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:22 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSR9tpWmptiI5iOUs27luYvQkDt%2FLh4k0dI18DJfeHY1XxXPg0NcTmjSwOVZhUmoyieLnEfNW6y%2FfLiLRtqGjoIqE%2FeE%2BfNqRrUR\"}]}\r\netag: W/\"698b1b06-1772\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa976bda75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6002,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6001)","md5":"d12854bf47958d5c925825b9d8c613c9","sha1":"a1e50ae2766ed2030429ad9bcb5b279f2b2f6c60","sha256":"4e640fd46fc360d950b96513ee1c7da07c34bcd55fb508ecc87672ebb8771fea","sha512":"b828c225005cf4128b698baf0cb7a10c47fd5cdabc0773f78fefb6ff19f4fe312e518fda9ac606d23fcf9ae978af8efb441dff27296ac7460678515f334a8a5f","ssdeep":"48:J2nUVAjWvvkEFI2n4wDqYvB58NlzJ7PZmD4V7pk25d1SBqGQb3NzB8g8ZFL2bvrt:WUPvNI2klzJ7RVPPde3sVj","tlshash":"0dc11052f10c7139f83bd594eea44e9cd264b223da160fcaf26652614ec379a2532b6c","first_seen":"2026-02-12T23:11:17.20473Z","last_seen":"2026-02-14T09:51:45.783669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppHeader-BNIIfFaF.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/AppHeader-BNIIfFaF.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:23 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bz5lN5VLyjdrOPITLL4Ac1Bjs4vJozqcumv1Kt6bYk9c4WzV7LBkCyzmK9qkkZDVNNdyIp5xs%2B5g2Bj0oXL07scskSpIw%2BqLutyY\"}]}\r\netag: W/\"698b1b07-8f8\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa977c1775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2296,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2293)","md5":"026479553cd5b7ab76ec0bd031474cf9","sha1":"30ebb069ff5dd641f476fc99dd49c02c3db71c36","sha256":"e4b87c9ce08f46f24babc931ce56035dff54d03206af5111bb8104531de41c98","sha512":"37d5e837d4cbfaa9d096d29208baae6457400b76093fb8c427faa3150c9d70f2250e135e1f5cc55fdd9aaf5d11c15eba6a3bc782bf1f42215cfef3f6bbedd952","ssdeep":"","tlshash":"4c41a61c380ab774362b4a64885bde4433191bafb2109c82d2b80c2d24e1db8bb9f758","first_seen":"2026-02-12T23:11:17.203113Z","last_seen":"2026-02-14T09:51:45.780374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/applepay-cCvBqq7m.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/applepay-cCvBqq7m.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:17 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9DPFW0PR0j8jeRtpcJUT%2FWDldafT9GWQWRYzAD6MaeJVakRmyT8706EoIjPVm3LcKhyL4IRKh9drKncFpVybkrBAF3M8WpclTUf3\"}]}\r\netag: W/\"698b1b01-16efa\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa978c2875a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93946,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d22de6ed370d68e5984c35ef88e65a52","sha1":"f298bf0e4bd927b5da9b820ff47e385a6bce528d","sha256":"ed83a1805565c843f1451a867bbddd4e25ed35bdbfe0df08cc0f18ec177592c5","sha512":"1dafa1a6e2fef09a8b961375cb3cc72e68cdf4b5089025a1f979202d4ac18968bab170ced22805b4a1e82916052dd924c355a2761e8764a10ffed9d9da30d323","ssdeep":"1536:qXf+mdaI2Xjb6P/OcXq+CzFc8x+1Tu8Y5wBl6vHiM46DoOViA6wHIa09e/kE9/:GCbFcXqxzFc8x+P809M","tlshash":"0093299da124b53782f75a8b8365821172b14d88b808c8e4f1ed4c7b496e95813feffc","first_seen":"2026-02-12T23:11:17.206728Z","last_seen":"2026-02-14T09:51:45.768607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/main_logo-DkewlB9Q.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/main_logo-DkewlB9Q.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/LandingView-poMnXtt7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JygmanH%2FgMKRmFUZQjeO2Xa3C346agfyOdW8U55EabDZ7YOkNVHE84BpXRdXexsjB%2FY9OqoUdaaeBfE6UhDVPev%2BVnMzrNzGZjFs\"}]}\r\netag: W/\"698b1b09-39\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa99593d75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cb40cfeb3ab534b3f0a71546a01534c2","sha1":"d8c6ea1fbc878b66b7c44119b45d6bf64e715d52","sha256":"6b9003eaa25aae9940f4ccf47a10d4df99ac90c4f3394e2904751e4d810e78b7","sha512":"0de28308bd4440b0f08fe5f87c6b94136cf236cb5b1e7489e90bfd049b93ca2f0edc19412a60ccc61a584861a7634f7d1dc2c99f3100d0b81ff398cda2f64e6c","ssdeep":"","tlshash":"3090022d5448496540b460a86663b85110202a7c3559535d5924914527e18508c4d934","first_seen":"2026-02-12T23:11:17.196513Z","last_seen":"2026-02-14T09:51:45.784598Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/main_logo-_WvTxrQN.svg","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/main_logo-_WvTxrQN.svg HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:22 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fx4BtZ3h222BYRhsYGkZFXjLt3fCvHboo%2B1xxeGv%2BM7Ta00PQqSejOE3X6McgbVkUyo70LquWdy6DqyfVGVFxzMqtPtkYrBCtpef\"}]}\r\netag: W/\"698b1b06-1255\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa9a0b0375a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4693,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c40f9a5c219285310fe2462c7d800db","sha1":"f62dfa12fda90d5081a99907f5dcac13a3798161","sha256":"46cf04d29ae0e86e5ce4c760270442cf959f03ae7ade61f07e2abffc9ef4cd66","sha512":"972d2bf313fd37318e2021a5c1b5cbaf15ca1d54cae80dda6330fdc48d686b83532c4071e37793134a6d64abb738c22d442b22cab544836607ed0a27da45b9e4","ssdeep":"96:+T1QisGJBm2Wx/qfoFgIkxeluWx6RUqOTpUjD3tbL7vbjp/ASX+0FPjKBjG:+T1v1EthFC4uWqyUjD3V7DjpxZPuJG","tlshash":"7ca174e6b7f530e4a801dba4e813243a776f34fa7b1bcf5583556a66fc5504886cc8c2","first_seen":"2026-02-12T23:11:17.205642Z","last_seen":"2026-02-14T09:51:45.785461Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/bitgo-BqJxcAc-.svg","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/bitgo-BqJxcAc-.svg HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:27 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c00R8DKFc98xZJXkNQ4nQkVZvZ6trcVwrmgMB2j%2Byz1A3LPXwmIXMjw%2BDVHVnkYBG2EpM0f17posNNQyb6753gpAXORIcvxHuDRG\"}]}\r\netag: W/\"698b1b0b-1b72\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa9a2b4e75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c0bce9b701d122dfdb50c16da2bfae1","sha1":"5c5fc7c04d605738e1044b3ba054d5934be6c4d9","sha256":"c8a5e3f8f4be4fc4cbd80661305c8e8337f730653a1b004ef0e3b517e2b4f66a","sha512":"c71f8a6217cd2a7b8c4b54568ffb24db6bb6ba67a052d801cbc3bb1512fb559f619f1801d505338495ae1582765ff8b05c80c43375a620c1fa70b528f76dd8b9","ssdeep":"96:5Iouzm7NPF1hfokBW6YpaFy6TajWUn54zaWsu5Wdw5V1CNfENfBEmruIZRoOyORZ:eouz2/oKI0Tkn2nLX5VoulBhuC/Iw","tlshash":"25e1bad97795a3e0e401ebf0df1649657f1f34fa3761c1a9c2916d94a54201dc495ce0","first_seen":"2026-02-12T23:11:17.227608Z","last_seen":"2026-02-14T09:51:45.786506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/bg%20card-CJqgdwDT.png","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/bg%20card-CJqgdwDT.png HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 946006\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:21 GMT\r\npriority: u=4,i=?0\r\netag: \"698b1b05-e6f56\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BIXclo%2BIC84AcbNj6uwmFQcbS07VXtlK3riuGmDToNBE%2BTXp5ocFbdJWpsCnXDS3GS9zl2qKGa7toSFfQ4rYUdDLVId22oMzyz5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdbaa9bbf4a75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1068 x 1026, 8-bit/color RGBA, non-interlaced","md5":"a7acec84ade66957fc6fafd017001783","sha1":"5dbd5d2e56a0f5ef93a92ea9405c008a43b01728","sha256":"cb22a4b589f320f64d15897471b0894efbb427167f2c2914917f231bf3478035","sha512":"df2fe78be9dd97da2c194a687711b68ca32f8bd09d29add4d0329e53887c26c2a5929f3999e6386ab0717c184d3e19cc3421b13f73472408aee28e40f8901961","ssdeep":"12288:3F9XGDxcYSns47hFRDqI9zyxmEgtS8VdpnXNDx/dMQEVFUUG/JuEjgugVHn4wwJJ:1QVcG47hgmpNXLyQC6urug1nf6molExG","tlshash":"bb1533dabde86a5dc63cf5b6aec960320b63f70aa1772c0c34b8f09f74799128790455","first_seen":"2026-02-12T23:11:17.181711Z","last_seen":"2026-02-14T09:51:45.787556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":91,"receive":233,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/main_logo-DkewlB9Q.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/main_logo-DkewlB9Q.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:25 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5v7qBlrZJUIvgjtLk6atUmzdKpDStQWxfQpgNJbIhGvZf1d8B5agF6FkEy4eJnf5%2BQUkAFMm312vKPEP68bqDyTXxOEmC56%2FHtFd\"}]}\r\netag: W/\"698b1b09-39\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa977c1a75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cb40cfeb3ab534b3f0a71546a01534c2","sha1":"d8c6ea1fbc878b66b7c44119b45d6bf64e715d52","sha256":"6b9003eaa25aae9940f4ccf47a10d4df99ac90c4f3394e2904751e4d810e78b7","sha512":"0de28308bd4440b0f08fe5f87c6b94136cf236cb5b1e7489e90bfd049b93ca2f0edc19412a60ccc61a584861a7634f7d1dc2c99f3100d0b81ff398cda2f64e6c","ssdeep":"","tlshash":"3090022d5448496540b460a86663b85110202a7c3559535d5924914527e18508c4d934","first_seen":"2026-02-12T23:11:17.196513Z","last_seen":"2026-02-14T09:51:45.784598Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/favicon.svg","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:12 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ul0xQqRsSrh%2Fu7K2FN97JOzc9ZgUtnn4PREiZouiUkPdYm3EtPmiWrjEs5c5hh1L%2FUsC5ouuCziDteZ2kQ%2FP3HxAXgfrsmQylA1r\"}]}\r\netag: W/\"698b1afc-801\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa9948f275a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2049,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86f7ee163c35d5ffdbb6e4a09ded5d66","sha1":"c1c174a9c6397d3795849d6b8cd5bdeec9be1086","sha256":"c9c6d830539ba972fcf2d7260eb38e5de66e4cbacca9d663af866d9e9d6262c0","sha512":"ed52b991050675eef9f9a43b14b616691cad669c6ebd49718ba354bc9744cb001fe4a7f527e6e916acb4884a8da4e97ed4b36b530939567123b11b1b9f72fba4","ssdeep":"","tlshash":"494130ee2fa40df4dd9ac7dbf752055db529e42f188386b2c29c8f08384195ddd05a86","first_seen":"2026-02-12T23:11:17.185044Z","last_seen":"2026-02-14T09:51:45.78853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/lottie-CQ1wq1zi.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/lottie-CQ1wq1zi.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/LandingView-poMnXtt7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOUMGcSlw8yCU%2FgwOxZE9Ve6ZU%2FTslnCygliuNP11l%2Fjvn6oVnq5I77SEIfMwVDqmCRH6R3t7ILPMijdBQoy33xdZ2Rg6bUTfdJu\"}]}\r\netag: W/\"698b1b09-4b0e4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa99491675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48562)","md5":"d174b34e1e1436d1cb798166dbf2569a","sha1":"ea9d80a34a0abd66e595df2dab1bb2498a65b4d6","sha256":"7a098bffc4fb59c8fa4771f96cf6ac9cab5fa5197c13d000fad50ae315162dca","sha512":"8bf974eda3ef59794cbed8e4afc47216ee4bd491221f7c98c9b5033c1d36179b6eaf62d038339bb40c3a22bc262814fe92ef9b730bc671bbf696be949132099c","ssdeep":"3072:sjspTeDxaIrfHTfSWfHBXwP+WMSKUAjcIyGnrSTc+yP8sTS2hEKzf6MPID:sjZxaIrHjS8HBXs+D5UjsO2hBfLs","tlshash":"086429597254243906c54069806f0a4bb733692e246ac45cb72cf4ffacbde8d31beb79","first_seen":"2026-02-12T23:11:17.214374Z","last_seen":"2026-02-14T09:51:45.789474Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/AppFooter-C0fSb-C1.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/AppFooter-C0fSb-C1.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pf-card.icu/assets/LandingView-poMnXtt7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDEwyH%2FHoTgFrvNCm28nbzzbCMX3gNMknbr0LG4NrFdooYz2%2BOecHvKCXgSEhNG6ztsjsXHvUbY9PU8vOkOE9yaWoHZ%2F5uIlJ1sL\"}]}\r\netag: W/\"698b1b07-19e\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa99592275a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":414,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (412)","md5":"0a77359a55d1068313d68b45e8ceb72a","sha1":"341ed0fc29b20e0c682469a513e6dfec5cf34c8e","sha256":"2015e930e93325f0030ee295c108dab62adcc68f5d7adaa9e25435aff8fd0096","sha512":"ac36427964f2463192d7dc3ba77e57e1f7b06c1f35b94f21277cbc0cddf561a5fa1fa1344e21705814ff8abbed2b09c8bfa205d77fcd95783d8cb5e12865a4c1","ssdeep":"","tlshash":"8ce0f1aebc50a4f4c26720ac633018010329f9fa7778c5fbbf681139626a5b1dd6d700","first_seen":"2026-02-12T23:11:17.195608Z","last_seen":"2026-02-14T09:51:45.781231Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/_commonjsHelpers-CqkleIqs.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/_commonjsHelpers-CqkleIqs.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bAomNX7V60mAmvrjB3sGrr3PBIikQU%2BApWgGP5kEQQMzrhNTuaItJTSRpxtAbpT5yaD3RxUFl5V6VGFVStxqVCUs%2Fv%2FM3u9JM%2BC\"}]}\r\netag: W/\"698b1b0a-74\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa977c0b75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3fdc400de2323774f9ca96898dc36065","sha1":"ae41a006281ebfc75eba0ea2ce69d20e7d99d65d","sha256":"4c81dcd54e7e877a79145c4c6fde30ac0e8d857f412b73f48f6970e5d7eab938","sha512":"002bcbc0b7d7b285f216a6e3ab5a9ed6197e04d2f94f28801502b5249584b1eb094bb6826087b8bdeec4da68202d43344b7d277f50af27f4f6585e06a91ce94b","ssdeep":"","tlshash":"eeb012887060e6f443d91d7a5033fc06d66e6c1c437f7ac083cd89f133350d51509a25","first_seen":"2023-06-02T11:45:24Z","last_seen":"2026-06-08T03:24:32.478861Z","times_seen":1521,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pf-card.icu/assets/lottie-CQ1wq1zi.js","fqdn":"pf-card.icu","domain":"pf-card.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pf-card.icu/","date":"2026-02-14T09:51:20.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pf-card.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 17:50:18 GMT","end":"Wed, 06 May 2026 18:48:57 GMT"},"fingerprint":{"sha1":"99:43:2B:1B:D8:25:5E:19:11:48:66:16:2A:ED:D0:99:78:AE:7B:A0","sha256":"F2:96:EB:58:41:6A:16:2B:52:61:90:6F:3A:F3:A3:D5:12:6D:CD:52:0C:F8:51:E3:6D:AA:7D:BA:6C:2E:3D:AB"}}},"request":{"raw":"GET /assets/lottie-CQ1wq1zi.js HTTP/1.1\r\nHost: pf-card.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pf-card.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:51:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:48:25 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgEhp1HrzX3wE6dEGi8o4hIyJn%2BetrT8lJ2%2B5gRi3GYN6P1Stx9VVWB6%2B4Io7RkJrdnXX%2BLODXLf3AwDFicm8Q8F81ecOWGmPv78\"}]}\r\netag: W/\"698b1b09-4b0e4\"\r\ncontent-encoding: br\r\ncf-ray: 9cdbaa977c1275a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":307428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48562)","md5":"d174b34e1e1436d1cb798166dbf2569a","sha1":"ea9d80a34a0abd66e595df2dab1bb2498a65b4d6","sha256":"7a098bffc4fb59c8fa4771f96cf6ac9cab5fa5197c13d000fad50ae315162dca","sha512":"8bf974eda3ef59794cbed8e4afc47216ee4bd491221f7c98c9b5033c1d36179b6eaf62d038339bb40c3a22bc262814fe92ef9b730bc671bbf696be949132099c","ssdeep":"3072:sjspTeDxaIrfHTfSWfHBXwP+WMSKUAjcIyGnrSTc+yP8sTS2hEKzf6MPID:sjZxaIrHjS8HBXs+D5UjsO2hBfLs","tlshash":"086429597254243906c54069806f0a4bb733692e246ac45cb72cf4ffacbde8d31beb79","first_seen":"2026-02-12T23:11:17.214374Z","last_seen":"2026-02-14T09:51:45.789474Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"pf-card.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}