{"report_id":"14853474-df49-477c-99ca-4f37bfdee518","version":6,"status":"done","tags":[],"date":"2025-08-31T06:18:31Z","url":{"schema":"http","addr":"navi30.com","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"navi30.com/","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"title":"Navi Roulette"},"submit":{"url":{"schema":"http","addr":"navi30.com","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T06:18:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"navi30.com","ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-08-31T06:18:33.099246Z","last_seen":"2025-08-31T06:18:33.099246Z","alert_count":40,"request_count":40,"received_data":10437014,"sent_data":22650,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/framework-64ad27b21261a9ce.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf0dbea2c1509e290fc7ddbdd9477a3b","sha1":"296721ce3728c51c7fac5fb35c971baf5fd92b7b","sha256":"4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7","sha512":"a047bef4736a82a41c60baefb59fd2d52c8027b3fcd788e3311ce5fd000ef719a80f0698a86e180fbffa708e0f30520bf6648e3ef15f62cf16b4ce237bb2ced2","ssdeep":"1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH","tlshash":"b6d3f9e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","size":139978,"data":"","first_seen":"2024-09-18T14:21:05Z","last_seen":"2026-07-22T21:24:26.342103Z","times_seen":2551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/uVUvp7P8aWqoBAu6mo_id/_ssgManifest.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-07-23T04:31:53.990405Z","times_seen":248008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/496-12983be6a7bed9af.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d0349980bd92edec730477d826305e8","sha1":"439dd5081aa2080ef2a96e88eed71da20f21d2b0","sha256":"6fe5d0b12ae08390045b147ec98fad38a3b5811efa2fe4e6f0f89c37bfd5163b","sha512":"5cf420813069c4549cd15a4149af9d3bfe405a920128940f8d97d30d7c4f1347924c823167c076ed2604b51fcaf8c548f4bd61274f71dffe1b1c72db94b8e72f","ssdeep":"384:8LacShmy3lQCpRl62uq7O7Syy6KuM9rf5MWvgZ2U5KP:8LAj36C3zRus4u","tlshash":"4d922a523549fcad43535a28d43f0406f37d9c24891df8a093f298eda1a65ce92b3f76","size":21186,"data":"","first_seen":"2025-03-25T21:21:04.765447Z","last_seen":"2025-08-31T06:19:38.280475Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/webpack-b8f8d6679aaa5f42.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4d74d8172c538de81a3972cb36bb280","sha1":"9d6a9188643ef3d122ca2871a50780506cbed3ea","sha256":"131c150fa4719bf2679a750ab1dc4118ba2180635e3776e4bddeca690368f10c","sha512":"26d6851a66bd88bdd1f98348ba11ac2c58a615672a8061f3bf46686a0466c7a03913b4bba4352106d4f7b96dbe190e44a3294b4afdc78f088aded99f0a0875ea","ssdeep":"","tlshash":"113165c932e5f8dd2717a454482f88d6b13799b2107dd8e1db05c2b56c350584272e6e","size":1445,"data":"","first_seen":"2023-03-13T18:24:32Z","last_seen":"2026-07-23T03:20:56.79027Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/pages/_app-4de54a1809dadaf9.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bc72c5fc568dcb76390d89092a56fbf","sha1":"dd2318c9e4d16f4a63b3d57827c866a94397e2e2","sha256":"80ab88f6c9705a640d2462f4c58bf175d9d000cb9f3adf3f91e5927cc4df5a46","sha512":"2fc55efe9496f19fdaae35de2a8b21f968a0f082ce71583c11a96a34acc4f2872ff252a3c9ea1f058e27deccea81e1fb5c96b14f29068218ed2eb44c8a72e588","ssdeep":"","tlshash":"b2f09e843cc2b424116350f402bf201e72bf1d58349c654197b2e0c97e7194d9012f4c","size":471,"data":"","first_seen":"2025-01-09T10:52:04.332829Z","last_seen":"2026-06-21T16:00:41.987768Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/api_s.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6c33f4a1c58fc9f784b289ca7dab09e","sha1":"04fd26a2baa60e59c43155eaa5345c7ff9c2355a","sha256":"65a1d8abd74a2d42487a711c558e74cf0f23de1f515672faaa13087750ec6163","sha512":"f2f7798f8dbeaa28741c845134e2f1f7093b715098e85c5ffabdf1871a94b650268cd746adf8993d8cd94cf48fb272115f2471b526bf065d283225f0be42dfc5","ssdeep":"768:RXjVaYCak8Qrcjj52rTveeO97z5pAf3NR3PNgpezLLY//30Nc+I+dk8OvVMCaZDe:xVX8cjj4rO7z58XNc+I+dk8vwUDk7N","tlshash":"1e73c7449a82608456a777782b1f60f0e777081f0c88bd4b799c6ad9cf1d92ecef0979","size":80575,"data":"","first_seen":"2025-04-08T10:46:38.689287Z","last_seen":"2025-08-31T06:19:38.283767Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dc9766caa95f4d00186bbfbb22c4275","sha1":"3086e96b2399ef494f3e8323843dd46064acc29b","sha256":"840cb52c041c75c8c69494c7f2ec410d906022b0ca07548b63e85a59a53b1f71","sha512":"c58a3cf8ca19d50df1625c36b51b12eea29fd6861f280681e47c3c33fb5c3c20220e027168ab48b05081c6d7206d40dd199a015484eaaa92008a7bbacf3ffd82","ssdeep":"","tlshash":"249004010d45405704373d4f5f0313c41033113734c0f011f51c431c1f51443c7405d4","size":44,"data":"","first_seen":"2025-04-08T10:46:38.715616Z","last_seen":"2025-08-31T06:19:38.286299Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/uVUvp7P8aWqoBAu6mo_id/_buildManifest.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6fa7e017825ec83555d863d68b876d6","sha1":"747a512afe17721ec0de0133b9cece197d54040e","sha256":"a1b2d62b724c7cdfa8be3b1dc4c5c4ad53bc67158611aebc651d32424560ccc5","sha512":"61eb057c19244f82db75a79481c6b644fe9bf833eb43c5c39e4a64158f6e6be7b66e893ad2cddb845d70ce97504c46e565b8e423418383004269f87f6d626dba","ssdeep":"","tlshash":"5ae0d8d7940df9066e63cc4d792f6311ef60c17616380ba3d2ad1a3890e01938f06991","size":390,"data":"","first_seen":"2025-03-25T21:21:04.864392Z","last_seen":"2025-08-31T06:19:38.252284Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/main-79b89e7296981bb6.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"281ca4298d81ecd969e766300487fc8e","sha1":"91fe80498bb53055e330e73b5c1bace8432ad776","sha256":"b20d5bec2b09e6a0373df444d96fdb131c7948554f07f5a7ea5643a871ed6620","sha512":"45cc5dc8a5ff48acb197ea3f4d816c2543f9617035cad521f51deb6d1519758e251d63dbc62481bc739c85f463137a752c40bbf43a51915655a98f6056410c65","ssdeep":"1536:ejKdQDlfrtA1uQIuF9/op93dX4NQpsBrylVdBe6L2CN6:SVrtyrQLdINiqylFe6L9N6","tlshash":"adb3e9b676d1f8a203c741d4843b0006f36a1dbe146f6045b3aadcd6b9a499e90f3f79","size":110620,"data":"","first_seen":"2025-03-25T21:21:04.790759Z","last_seen":"2025-08-31T06:19:38.285037Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/pages/index-cecafca6ef9d815b.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3733d5afb107dc7ac2f9c0f4823feb9b","sha1":"2dec38dd7bb21cf87d89629e34b6115960086673","sha256":"5c7bf44496b13ea4a90f7cedef4b028e28a5ddbe5b21d7fea1c3e59dfe5cfcfd","sha512":"5cac377d38811e2c8d86328ca445e1be8d72886a9ffa4b2904b7a7074693b33f8c6a51ca338a23ad2d627ac61740184d44933a8854af2ed04ab7b0168f38437e","ssdeep":"384:7jSI7sOQrS3s7CH9PRjUtB7hcjYk4HCmI7C1fDvn4T4o/iOnODzVL14:HSIQMs7C9PlU3CjY/CmDrvnrOZ","tlshash":"c923a52a98b42a622c537060796f5b5db217050f9d587c247becc1a00f1dd9fa2fdbac","size":47695,"data":"","first_seen":"2025-08-31T06:18:01.396801Z","last_seen":"2025-08-31T06:19:38.250571Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/496-12983be6a7bed9af.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/chunks/496-12983be6a7bed9af.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=5LDqgDXIMXBR4EaA; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:03:02 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 7263\r\nddg-cache-status: MISS,MISS\r\netag: W/\"52c2-1959ed608f0\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21186,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21186), with no line terminators","md5":"2d0349980bd92edec730477d826305e8","sha1":"439dd5081aa2080ef2a96e88eed71da20f21d2b0","sha256":"6fe5d0b12ae08390045b147ec98fad38a3b5811efa2fe4e6f0f89c37bfd5163b","sha512":"5cf420813069c4549cd15a4149af9d3bfe405a920128940f8d97d30d7c4f1347924c823167c076ed2604b51fcaf8c548f4bd61274f71dffe1b1c72db94b8e72f","ssdeep":"384:8LacShmy3lQCpRl62uq7O7Syy6KuM9rf5MWvgZ2U5KP:8LAj36C3zRus4u","tlshash":"4d922a523549fcad43535a28d43f0406f37d9c24891df8a093f298eda1a65ce92b3f76","first_seen":"2025-03-25T21:21:04.765447Z","last_seen":"2025-08-31T06:19:38.280475Z","times_seen":10,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/uVUvp7P8aWqoBAu6mo_id/_buildManifest.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/uVUvp7P8aWqoBAu6mo_id/_buildManifest.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WIt1PsszdwN6NsNr; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:03:19 GMT\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-length: 285\r\nddg-cache-status: MISS,MISS\r\netag: W/\"186-1959ed64b58\"\r\nvary: Accept-Encoding\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"b6fa7e017825ec83555d863d68b876d6","sha1":"747a512afe17721ec0de0133b9cece197d54040e","sha256":"a1b2d62b724c7cdfa8be3b1dc4c5c4ad53bc67158611aebc651d32424560ccc5","sha512":"61eb057c19244f82db75a79481c6b644fe9bf833eb43c5c39e4a64158f6e6be7b66e893ad2cddb845d70ce97504c46e565b8e423418383004269f87f6d626dba","ssdeep":"","tlshash":"5ae0d8d7940df9066e63cc4d792f6311ef60c17616380ba3d2ad1a3890e01938f06991","first_seen":"2025-03-25T21:21:04.864392Z","last_seen":"2025-08-31T06:19:38.252284Z","times_seen":10,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/main-79b89e7296981bb6.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/chunks/main-79b89e7296981bb6.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3tBUnblzmRTrl8La; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:02:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 31006\r\nddg-cache-status: MISS,MISS\r\netag: W/\"1b01c-1959ed5beb8\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":110620,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"281ca4298d81ecd969e766300487fc8e","sha1":"91fe80498bb53055e330e73b5c1bace8432ad776","sha256":"b20d5bec2b09e6a0373df444d96fdb131c7948554f07f5a7ea5643a871ed6620","sha512":"45cc5dc8a5ff48acb197ea3f4d816c2543f9617035cad521f51deb6d1519758e251d63dbc62481bc739c85f463137a752c40bbf43a51915655a98f6056410c65","ssdeep":"1536:ejKdQDlfrtA1uQIuF9/op93dX4NQpsBrylVdBe6L2CN6:SVrtyrQLdINiqylFe6L9N6","tlshash":"adb3e9b676d1f8a203c741d4843b0006f36a1dbe146f6045b3aadcd6b9a499e90f3f79","first_seen":"2025-03-25T21:21:04.790759Z","last_seen":"2025-08-31T06:19:38.285037Z","times_seen":10,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/wonderful_830x1044.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/wonderful_830x1044.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=Kfdivnxbyu4e1Y5D; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MXZ0QHESBJvJjKyd; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 889348\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 27 Jun 2025 15:33:10 GMT\r\netag: W/\"d9204-197b2056ef0\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":889348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 830 x 1044, 8-bit/color RGBA, non-interlaced","md5":"c10b9634d958afea60bae3da5f23919f","sha1":"c197ef35c6248958be239355410f9f973cf3c5a3","sha256":"6aa026fc27b5dbf95973b82c876f3a45ccfdf878c9c1ed6876ed1b89e4426531","sha512":"7f8f41aa515258c12fa9fee046a10d306d59bc508b9aa02398e62d72aef43556836f62d1986ed2808980578dc59047211bdb120a01846478a62dea426081da53","ssdeep":"24576:HItmhMBuLH+3Qyf1QwD6B87PDz2g/BhFc5Imuwy0W:odbf1uq7LKwBhFcCmuNx","tlshash":"431533b73a16adb0b4297c8322acf71d56a8bfe39b16d454e371373422407ee4128e5d","first_seen":"2025-07-01T19:10:04.37744Z","last_seen":"2025-08-31T06:19:38.28237Z","times_seen":5,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/person-5.0a0a1790.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/person-5.0a0a1790.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=RNIcqN1YUoCtW4HI; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 465115\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:04:44 GMT\r\netag: W/\"718db-1959ed79760\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 831, 8-bit/color RGBA, non-interlaced","md5":"dbf0080442ce642f122ab6feb3b171c8","sha1":"afed3bb87410962df957fbe8525048761daf31d2","sha256":"87f58677fa6226c601870d7a6ae0170b328e1897412c48bb7da22b651147669d","sha512":"277d001799094d5fe090218b534d84ca336402682ba17f27521b5e5d3e3c35d50eda3a47efe7405be1ecb736cc58d0af15bef977d05492eae6b1832242353b85","ssdeep":"12288:AoGhMDW4nW0kfNdtHma+CmYl7L9T3yFrL7PpSPI:AoG6HnW3HmMNLyxfBSPI","tlshash":"79a423e65b909dcf14673f1807c623e9955b14b60afa0e30cd736dc82243e5683b99be","first_seen":"2025-03-25T21:21:04.844231Z","last_seen":"2026-05-03T18:40:44.914175Z","times_seen":21,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":39,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/button-open.d7dd6b6c.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/button-open.d7dd6b6c.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0VCZOtTk2Igc9dJr; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 41251\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:24:42 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"a123-1959ee9df10\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 118, 8-bit/color RGBA, non-interlaced","md5":"e8ef544f958d34fde2a758bcf1e9fd76","sha1":"986a0819679b8221fa057e7b8aba4f982691ec89","sha256":"104fd15457dfba2050ce627d817e1981c3d45c427999143ad228ffea7c28c5d3","sha512":"23d4d6f6da2aa35a1aefd15be2a6042112d16331ce9278aa9f806575866b2ade87668bd9671605a1272779ac526bc157186019c8178f6c20fc9dec154a800fad","ssdeep":"768:Ca4EWkbgLQODARuBxh2zO2jiO2BWPxHlhEu1xja7l8S2HldNOCKErHd:CaShLxcuBSrRlh31c8dHlqCKErHd","tlshash":"b403f2a9cd63d3dcb036645751fe22e47a425362025fee2186eb8225cce73d981c3f5a","first_seen":"2025-03-25T21:21:04.766463Z","last_seen":"2026-05-13T09:47:03.00667Z","times_seen":29,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/person-1.8e2c6cbb.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/person-1.8e2c6cbb.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=trkMtrwWBTMJhQzZ; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 404231\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:04:06 GMT\r\netag: W/\"62b07-1959ed702f0\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":404231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 831, 8-bit/color RGBA, non-interlaced","md5":"759f56511585956dad0e84b1df42c3ab","sha1":"59c4ed7f1d665116b1e0435637dc7782bef7f6b2","sha256":"eae3158576b21ac987c6da6b0024ff76d5bec37934dd3fc112df3bf9d12cec70","sha512":"0738302a690430a2ae465f5f3820bc5c85431bbb2fd1c433f58dd77bd203434011095b64b8e6c2dbbf404161c0ae5e664e8e0d4e7266070c65fb7d301fa5ef91","ssdeep":"12288:FtfiCf/9OM5vUqWeZvh9sbELnQer1GlVUPx:FtqcoqWeZvh9znQwykx","tlshash":"658423764e61d4ceb9db3da13137ad086d53128e3a8748d84863723982f056defe36d8","first_seen":"2025-03-25T21:21:04.838114Z","last_seen":"2026-05-03T18:40:44.92257Z","times_seen":21,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":77,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/steam/counter","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:13.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"POST /steam/counter HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://navi30.com/\r\nContent-Type: application/json\r\nContent-Length: 19\r\nOrigin: https://navi30.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=GnTgpZ1O1bSOM7qm; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 201 Created\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=kHiWIEk4R3qTKmeT; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:13 GMT\n__ddg10_=1756621093; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:13 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:13 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-23T04:24:56.418253Z","times_seen":177446,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/uVUvp7P8aWqoBAu6mo_id/_ssgManifest.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/uVUvp7P8aWqoBAu6mo_id/_ssgManifest.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9uV2aB92ewVJCGqx; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:03:27 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 52\r\nddg-cache-status: MISS,MISS\r\netag: W/\"4d-1959ed66a98\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-07-23T04:31:53.990405Z","times_seen":248008,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/framework-64ad27b21261a9ce.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/chunks/framework-64ad27b21261a9ce.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FWoezMpIMLqLrKMS; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:02:35 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 43855\r\nddg-cache-status: MISS,MISS\r\netag: W/\"222ca-1959ed59f78\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":139978,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf0dbea2c1509e290fc7ddbdd9477a3b","sha1":"296721ce3728c51c7fac5fb35c971baf5fd92b7b","sha256":"4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7","sha512":"a047bef4736a82a41c60baefb59fd2d52c8027b3fcd788e3311ce5fd000ef719a80f0698a86e180fbffa708e0f30520bf6648e3ef15f62cf16b4ce237bb2ced2","ssdeep":"1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH","tlshash":"b6d3f9e83996f6516ab311a700ef2803737d1a1b280c4960e215fd9e75b842bb17bfdd","first_seen":"2024-09-18T14:21:05Z","last_seen":"2026-07-22T21:24:26.342103Z","times_seen":2551,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":42,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/person-3.7b757fb7.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/person-3.7b757fb7.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7nnv3YZLIxUX8StN; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 475800\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:04:30 GMT\r\netag: W/\"74298-1959ed760b0\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 812 x 896, 8-bit/color RGBA, non-interlaced","md5":"b448ec850e2bd59b0ea34b85fee929c9","sha1":"399cabb74b6488ec63eb5bb7c32fef5fcd4a7e03","sha256":"52f4d3ba4acaa67373a35ec61062f1330a4d509f7e164ba1a79a24dac8610a89","sha512":"710cc67fd447eafc9d8b8bd5ddf25dae27a9e0ec3aa5fa4b2f8ef520051257737b3ca3ea239e306b379f2c2bc848989e58840bb71b4d0a381c0f0c783a986727","ssdeep":"12288:Kx+ckyt8sK1aAulzYgmZrucOwnG2RJV2/CIb3Ff:sPkyCspTL4rLOwTJV2/CQf","tlshash":"90a4239ec68b969b5efc0a1d0c8ced684c606896f9e90b163d8bf475dc17ef09448836","first_seen":"2025-03-25T21:21:04.834801Z","last_seen":"2026-05-03T18:40:44.913474Z","times_seen":21,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":74,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/csmoney.cc0687f8.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/csmoney.cc0687f8.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Kfdivnxbyu4e1Y5D; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3879\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:05:02 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"f27-1959ed7ddb0\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 285 x 67, 8-bit/color RGBA, non-interlaced","md5":"71808e3bcc2e62649195ced18ed1b567","sha1":"5e1d1a96d3070639fa93e5b69a361187f804e987","sha256":"cc2087474831f2352994b10100fbc592cf49b36da50d6913dfa17e843677e5de","sha512":"a6afecc6e0273279c2aa199a74086387ab60c83757f961c7e077a9ddf1500ed0ab7b4d782226402280d9d7d72e3a833eae9b02d2640bca9493a95865a65676de","ssdeep":"","tlshash":"be816d4af4e16c73eebb08e04de213e0c25993965365f4a284671ced4da7b706905092","first_seen":"2025-03-25T21:21:04.859819Z","last_seen":"2026-05-10T06:08:17.462261Z","times_seen":11,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/navi.eabae28c.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/navi.eabae28c.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TNOJ0qFHYP6DVWqE; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 2405\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:05:21 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"965-1959ed827e8\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 115 x 100, 8-bit/color RGBA, non-interlaced","md5":"890aa6ff1d2abb535664eb7d7b1869e5","sha1":"8b6878df9bc8189434981531a81a9b8b131ad2a5","sha256":"e59dfa452ae52ce44450bab6412f1b1389b95d8c088c394ef70f777ba977b60e","sha512":"76f2e9e79e35105604890ea9426cb4584df778161fb9cd7a7731b16641f9b61f70e4ea2d83bc06c30668b64f676d068eb755bd2b39b4cc706a4f51d022b50771","ssdeep":"","tlshash":"af413bb2e24bd00fd30170aeae2e119753bd002a2a364a45e5dce8b20642807a1da117","first_seen":"2025-03-25T21:21:04.821345Z","last_seen":"2026-05-10T06:08:17.545902Z","times_seen":11,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/api_s.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /api_s.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=1s7gYq1xOd3qoYQl; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 12 Mar 2025 18:01:07 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 12230\r\nddg-cache-status: MISS,MISS\r\netag: W/\"13abf-1958b846eb8\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80575,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d6c33f4a1c58fc9f784b289ca7dab09e","sha1":"04fd26a2baa60e59c43155eaa5345c7ff9c2355a","sha256":"65a1d8abd74a2d42487a711c558e74cf0f23de1f515672faaa13087750ec6163","sha512":"f2f7798f8dbeaa28741c845134e2f1f7093b715098e85c5ffabdf1871a94b650268cd746adf8993d8cd94cf48fb272115f2471b526bf065d283225f0be42dfc5","ssdeep":"768:RXjVaYCak8Qrcjj52rTveeO97z5pAf3NR3PNgpezLLY//30Nc+I+dk8OvVMCaZDe:xVX8cjj4rO7z58XNc+I+dk8vwUDk7N","tlshash":"1e73c7449a82608456a777782b1f60f0e777081f0c88bd4b799c6ad9cf1d92ecef0979","first_seen":"2025-04-08T10:46:38.689287Z","last_seen":"2025-08-31T06:19:38.283767Z","times_seen":7,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/css/96eb2e973c5a966a.css","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/css/96eb2e973c5a966a.css HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Ec7wavgaBca6sOQz; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 22 Jun 2025 23:53:35 GMT\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-length: 466\r\nddg-cache-status: MISS,MISS\r\netag: W/\"3af-1979a0fc818\"\r\nvary: Accept-Encoding\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":943,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"786f868df27c0c94e514ffe549d0c921","sha1":"d574bcc0dac9496388b6c3d613bd8a5153f8a437","sha256":"b3140d1b1dfa3c7b3f36d679513a711a5a896a633d49c4ef5c8a16294da8377a","sha512":"55619d9e5442cffbe45a78fb0a3b2488da3a20d2effa34a2275074be7b926ccbfe5df172e6c49b224bf4e190edf83011b3652a45575adfeb73a2873acf4945cc","ssdeep":"","tlshash":"8611d059e956218f27338f3d4379122ae9548830ab021f6c3eb4e2f4729d68003f1ed4","first_seen":"2025-06-26T01:18:09.599444Z","last_seen":"2025-08-31T06:19:38.283179Z","times_seen":6,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/css/cdac897fd7e939f6.css","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/css/cdac897fd7e939f6.css HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xPhwr8rXL9NwQWhL; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 22 Jun 2025 23:30:37 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 4664\r\nddg-cache-status: MISS,MISS\r\netag: W/\"8e75-19799fac148\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36469,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"468f61792105662c58c2bc3cb8e1993c","sha1":"422fcf99fc2c6e461e7548454cbf92bad04e166e","sha256":"3d5a9370086778682b660309089847d4a09ba0ac05b170ac55aeb46a3363a987","sha512":"c84abbba00741ec5973f5051eaf6ab478a45cc84aa92825b83fe22211e83621d4537e8deecd22fe14d71d47c06e70cb37283ebde55898e832c67f2f37453c3bf","ssdeep":"192:fKBwiJoqfuL9HssA2blxsS/gIUuXL+Gjtdsnt6NH06fpJ7bEVib1QdL+xYtZdOnB:fKBwiJoqfuLVDJsFwGeeG3JgeQnlal","tlshash":"aaf27f5839e01c044777433956ef6be8292ce497282bdcbab3d1245f8f4c678a7da217","first_seen":"2025-06-26T01:18:09.58189Z","last_seen":"2025-08-31T06:19:38.279824Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/css/bcf2818d57aadaea.css","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/css/bcf2818d57aadaea.css HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hnYcpNYRovG015y2; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 22 Jun 2025 23:52:54 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 6942\r\nddg-cache-status: MISS,MISS\r\netag: W/\"5721-1979a0f27f0\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":22305,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7404), with CRLF line terminators","md5":"9fa337d11c83a01d1023046bf0a3d64a","sha1":"199c31e4069b2a59a1bac40f2812361176a85477","sha256":"60566a69e534e4e5376ea4c6314da84a96071527b37b6cb4f69bd285f7b170f3","sha512":"de98b50c5711b0fec6af53494ca6ce7cf372e223bcb91a8977bd7636badcdcac059d96d3af64ab72fcd71a3e28c68a720eed07145916c25748e396ad10fb839f","ssdeep":"384:FqERQg1pV41QtG1hXjALfZVmnZQIPLeg3gh6eg3gthGI1:wEfHV41QkpRL3wh63wth7","tlshash":"4ba21ba4d78561ccb537dbf0bb524e25b31e58767b01caa97fe42488d38611cc266ecc","first_seen":"2025-06-26T01:18:09.563261Z","last_seen":"2025-08-31T06:19:38.256379Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/webpack-b8f8d6679aaa5f42.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/chunks/webpack-b8f8d6679aaa5f42.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=V437dIlshYzeyelT; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:02:24 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 809\r\nddg-cache-status: MISS,MISS\r\netag: W/\"5a5-1959ed57480\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1445), with no line terminators","md5":"b4d74d8172c538de81a3972cb36bb280","sha1":"9d6a9188643ef3d122ca2871a50780506cbed3ea","sha256":"131c150fa4719bf2679a750ab1dc4118ba2180635e3776e4bddeca690368f10c","sha512":"26d6851a66bd88bdd1f98348ba11ac2c58a615672a8061f3bf46686a0466c7a03913b4bba4352106d4f7b96dbe190e44a3294b4afdc78f088aded99f0a0875ea","ssdeep":"","tlshash":"113165c932e5f8dd2717a454482f88d6b13799b2107dd8e1db05c2b56c350584272e6e","first_seen":"2023-03-13T18:24:32Z","last_seen":"2026-07-23T03:20:56.79027Z","times_seen":177,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/bg-top.917f3ba6.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/bg-top.917f3ba6.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/96eb2e973c5a966a.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4HRzESeiJ2eAkUHG; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 1250505\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:24:16 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"1314c9-1959ee97980\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1250505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 909, 8-bit/color RGBA, non-interlaced","md5":"830293c499c0bb4eebb90b0d34a6afc5","sha1":"5d87e7dedcb49a26013a4af2d33dac073afcaae5","sha256":"66f47f6afe88fc442f5948fe803ab8e42ee0a6e606de2f70d9700f0c743ee9ed","sha512":"c96f4b3d723c9c03be7ae9838a7222be2474e702692a3a814cef338eca2eb1f558fb39ed74b4adb485dba422e2fa5da9a8338816a22198840a4227c51451da81","ssdeep":"24576:RXNGsLx0jNjxMqQUlGmg4bjcbqKNVi3nb3qnHVj5daWccRAqWaqNj:lNZx0jHGUWWYbqCmn+t5dUQAqSh","tlshash":"6f2533731d1e44c1b77ba79121f26e5cbe311748a85ab240f7641ca1923ef6ae47cb0b","first_seen":"2025-08-31T06:18:01.374182Z","last_seen":"2026-05-03T18:40:44.926448Z","times_seen":15,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/team-lines.8a64e266.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/team-lines.8a64e266.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xAoRcmukReBlNTGB; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3179\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 13:17:37 GMT\r\netag: W/\"c6b-1959f1a5168\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 175, 8-bit/color RGBA, non-interlaced","md5":"2500f9879e1b636968e1826fefc8cc6c","sha1":"0419055cfe475b2379a6548fe2f11cdb123bbf6c","sha256":"9a97322023b5d925cfd29e421209ff49f66d4af9bc5ff738a103b3b13d0cf0f0","sha512":"ea548a8686f5e7203d93a4a2c483da0739cde60e733a6cab643066bc6cc9497cd032e460e7dfbe9b8257521cfdfb85d0bdfec3116857ef9d10c6ea6bc4f8c0e4","ssdeep":"","tlshash":"7861ac7ed651385421ab8d87b12949fd7e74021d5130844fef40e6eeadecc07e92dda0","first_seen":"2025-03-25T21:21:04.807916Z","last_seen":"2026-05-13T09:47:03.003547Z","times_seen":29,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/button-start.e161a054.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/button-start.e161a054.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XDt7TdHj5auz0Wv4; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 43251\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:25:02 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"a8f3-1959eea2d30\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 198, 8-bit/color RGBA, non-interlaced","md5":"fee4b9ee7aa7fb903edef4b3690a695c","sha1":"d97c17984288ba71d133383b4867b6d4639981b2","sha256":"67e4155acc95920eccd99eea4995d09fe9880b160da8c7e60b1cf78c089afb1e","sha512":"6eedbdff5133d167b3d7f10930fe0e3bd10702ebbc7cedae245b28e424515f46f3c3f81c1a49f6781335dda743c3672c18c42cb2b09632744a7edacb82112296","ssdeep":"768:kxInKhLnjO84Rpv/Fs07ehanXaUj/Ucor9iqLfurtIlIaXqgmiA1PYphb1uKM+yp:yIWnnWJ7EaXbczkqLfu/iDmIp+KMaO","tlshash":"b413d0a8cd8b19910bf65576c8d2414fb81c3dca971421bf3e981a45dfc1f51636baf0","first_seen":"2025-03-25T21:21:04.817281Z","last_seen":"2026-05-13T09:47:02.986719Z","times_seen":20,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/4e81fe9cba68eadc-s.p.woff","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/4e81fe9cba68eadc-s.p.woff HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://navi30.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XXVetUTBcBrrJsiL; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: font/woff\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:00:08 GMT\r\netag: W/\"8ecc-1959ed36140\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":36556,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36556, version 0.0","md5":"989947b092774c1d2811236856bbdcc3","sha1":"ea98b81bd2692f0be4331f20e2b304a6258b1ba1","sha256":"6a156519b783c083e2c25ed5c49c00dd956d6be26a347ef09a77221abbed33e9","sha512":"440fa0acd6f1c6e30cfb8aa4de56009579a17153a020c6714b56a9ba8104eee0807402db06817b0c3a338be7366cd5789f964dbcc338a2d6dd0056eb0d24ad2d","ssdeep":"768:8M3Mo0JBe4eVCT6M+D+AHn4WsoJavUMowRb6mr:8M3kJBZkhYAH4H5vUvw0mr","tlshash":"9cf201c2897cf25a6920c8f66cefb9e3a53535d7cc613b09105ba9ad0263017b88493a","first_seen":"2023-04-07T01:55:32Z","last_seen":"2026-07-17T19:20:24.641022Z","times_seen":722,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/person-2.568f999b.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/person-2.568f999b.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=nNM1bc0evTU9zkhO; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 484916\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:04:20 GMT\r\netag: W/\"76634-1959ed739a0\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":484916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 831, 8-bit/color RGBA, non-interlaced","md5":"25de64897aab9cae72447a740f702fbc","sha1":"709891292d14cce8dd7a1955aee8d7e2eba5ca46","sha256":"45ac754add0b3cf4542ea574679498965dffcffff7ed2e56b1553829d5dcd58b","sha512":"83fb7e870cff9cb304a11b9c2d0080935c17ccd0a71871c195a259f24f975625fe19782da3b78f9719ca94ec0933dd79e94ad00b894313f89a7490d006a7c7fb","ssdeep":"12288:Rzu5uYbUBFaHxsHZXY+uSGalTLmmNDbN5xhpxwkwz:lFQAFaRsHlY+Gatim5Pr1K","tlshash":"fca4237eede9f11c2cf61b514806a732878e64e93c25d0e45f426e241b12e0e7ca77da","first_seen":"2025-03-25T21:21:04.797805Z","last_seen":"2026-05-03T18:40:44.930058Z","times_seen":21,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":78,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/person-4.ae019987.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/person-4.ae019987.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=84jqMA9szOeu2MUR; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 441355\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:04:36 GMT\r\netag: W/\"6bc0b-1959ed77820\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":441355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 831, 8-bit/color RGBA, non-interlaced","md5":"c23112390e3bd0a0d868c92ba3e5b216","sha1":"a2b2823094c600b00f25c504b47503b0dd095ebb","sha256":"27b0b94f71a96cdfd1dc4b308ce1f693ed71e81b1148f096275aa357895be512","sha512":"2ba0d65c27f4b6e07daa13f805a0ec4811ec7cdc9a13f63e3ac4ea652991556682de8db50af73c88f39b42861e39b76ab62d41fc19efea3b94b952b5cadc8f24","ssdeep":"12288:5FK4Hk0TnL2fL5vJwwNxULk8VLj/Rm1yZ+CIjJ6:5YU0uwTZ8hbRm1yEC7","tlshash":"3b942343190d915670764c71a781d5d8bbeae7d28b1274caab230abf7e1673f5f8a200","first_seen":"2025-03-25T21:21:04.852919Z","last_seen":"2026-05-03T18:40:44.923265Z","times_seen":21,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":76,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/b1t_830x1044.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/b1t_830x1044.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=Kfdivnxbyu4e1Y5D; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=6u6D4z9xI1FrXIis; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 831352\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 27 Jun 2025 15:32:34 GMT\r\netag: W/\"caf78-197b204e250\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":831352,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 830 x 1044, 8-bit/color RGBA, non-interlaced","md5":"41faa7dcf522a7a63d85b07a475c20ba","sha1":"5438cbf6d06eb1dfe178ca9327d331fe6f44e3e6","sha256":"d2c675fe5f454f8a3d64683d7d513afeb80d4f1439d4b8b0e843499ca7fabdac","sha512":"3884f03ae6d87562fd649422a0804e5ea7f33000b7355674d11aa95b85965f27a47d4fc8e50fd4d6c06f50ab9ce45da76a794bde60a9b9199a77ab1b2737c64d","ssdeep":"24576:ZFB8n6g9iNYA9uCFTS4pi1TYyN4j+D0iSdNQ/PKI:J48YMuaTc189TxoN","tlshash":"5d0533c23f223386db8942e85b8575cbc66121c39d52a6349756481f9fdd07cfa0d1eb","first_seen":"2025-07-01T19:10:04.361895Z","last_seen":"2025-08-31T06:19:38.281817Z","times_seen":5,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/iM_830x1044.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/iM_830x1044.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=Kfdivnxbyu4e1Y5D; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0jguRerhpuKxpTVy; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 884176\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 27 Jun 2025 15:33:01 GMT\r\netag: W/\"d7dd0-197b2054bc8\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":884176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 830 x 1044, 8-bit/color RGBA, non-interlaced","md5":"0483e90d2b2562633dbbf7b3d0f8438b","sha1":"277637a58789bb69a6cda4c29c70e2a42f3b2ec3","sha256":"4ef80c7620c7f2f52dbb9a6f290749d625e5424e63ac37c92fd2511748e27ec9","sha512":"066e7004ee4cdbc0d03c977417a56b179a1789737a71e212900b29c9c13e84bb8b1799b86224ce0477705e1d4838c945c8ac24d75b4edda58b2cc0d01393ceb0","ssdeep":"12288:e1ZRKwjjWqIWR+hOew7pYo7a9TfV8wGI9tr/1UdBg3W3otN40cBJ6v/d5VG3gi:ARzYceepYl5fZGItqBg3RATAd503D","tlshash":"101533a2e6db04368fe765f8bf5a645a67da10cad1b18740d39e0da81e711d2fcc310e","first_seen":"2025-07-01T19:10:04.38558Z","last_seen":"2025-08-31T06:19:38.26856Z","times_seen":5,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/2b36e1e8f1bfdd5e-s.p.woff","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/2b36e1e8f1bfdd5e-s.p.woff HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://navi30.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=h1Rlo11q02QV6L03; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: font/woff\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:00:21 GMT\r\netag: W/\"9404-1959ed39408\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37892, version 0.0","md5":"82d7c60ca56318d5574a3e88f197c509","sha1":"63cf578c4ffc4f3cf9bbbce09b46176372f1ce5c","sha256":"a8c87e22fdc2213c42ee708df62ecef8847712ad02e37e544ce57cfdf7d4b6e9","sha512":"f2ec085c8c208ad2cb060eb79bc07037b2092ca49e6ea9e0ba3f4a1dcede3c40159a635e2a55243463a4fe800e5aa1461237bcb7d882dca9dbe1144424c14b90","ssdeep":"768:HvU3nWkEskh+2sJGFjzN44iE59C06/eLNpw6qsz/n4nA7oTnmSRry:HmfEsE+5JGdzN+Ei/ehpTqsjn+Tnm3","tlshash":"5d03020da8739706f86b2f3ca7ef0fd48898897c7d11d92bc0210b9144b58af6b479b5","first_seen":"2024-08-19T17:34:14.53642Z","last_seen":"2026-05-03T18:40:44.925634Z","times_seen":25,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/decor.e57ce5c2.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/decor.e57ce5c2.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/96eb2e973c5a966a.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=IeVzXcFMgXoEfgid; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4535\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:24:26 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"11b7-1959ee9a090\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1308 x 450, 8-bit/color RGBA, non-interlaced","md5":"57496eb7b35eeb90d0495a2abb7d3ef7","sha1":"c8f6658c371f995f2a00a4b7b363dc0184d39863","sha256":"de1184ed50ba9e610cfb03897bccb1f5121936e84a544d39fcaabe3a20c97d39","sha512":"13269abc7a2d895e6ccf205e81cb6c0cbb6f2f2c890575abc3bb68e12762dfc804fd673d98ec4b507f98a3df783f380c883be340e6fdde550ceab30841fd2026","ssdeep":"48:L/63nPYOTbzs5JJV2BgBJCuVz1BPMgo5Js0A2r1NXUblzg69I6J:LS3A0b8JJV2yHCmPO8lfJ","tlshash":"ab91c6aa63d60c82c25c797ca47afb6d1126bdaf4c0415c6c7f61ae117054cf57650d1","first_seen":"2025-03-25T21:21:04.827915Z","last_seen":"2026-05-03T18:40:44.927976Z","times_seen":21,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/bg-bottom.4f6cbda1.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/bg-bottom.4f6cbda1.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/96eb2e973c5a966a.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=uRa5vvjxQDUuJKTU; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 640776\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:24:35 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"9c708-1959ee9c3b8\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":640776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 732, 8-bit/color RGBA, non-interlaced","md5":"964f4ff3eb1661e3e07196f42fb6757f","sha1":"56d81c55ad02f2481151a48f72c8c5f1173e3e7b","sha256":"276f67e97e6197e040303fe00ed6fb1a8edf2f04ddb8770930ad7e891ccbb6f1","sha512":"fd7bb402308fdc808754554277382aa8418d39e6e70a9b35b7d21db691fd8b6a29cae3f8579e022101e2153246095542d3196fc425eaaff157535a88e17d7828","ssdeep":"12288:W1SxAXnElsBbil2urD736BIxjLUPTFH6VkbRJ9J72c9s+po+y5U/IJM:ZG0lFwurSWxjLU7d4kbRJd9s+po+hwJM","tlshash":"99d42328274f188f9917afc0c3feb6cb8e643e5ab5811ab1815e7445464ee44fb0f4e9","first_seen":"2025-03-25T21:21:04.84323Z","last_seen":"2026-05-03T18:40:44.917115Z","times_seen":21,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/team-shine.0d1438cb.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/team-shine.0d1438cb.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vTh1lhtqS4pb19cQ; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 585604\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 13:17:27 GMT\r\netag: W/\"8ef84-1959f1a2a58\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":585604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1189 x 556, 8-bit/color RGBA, non-interlaced","md5":"5dc4dad5ae7fc39dccd1b35b13fc693e","sha1":"5ebdb3e907f0482eb06ddcc10ecdf30a43dc2ae0","sha256":"7d3b44909b43c21dd7665f2449fef61f985f8d1ff806da21de059f049e0114b1","sha512":"dfed61a940d6593b3f0ec5237b985badda8e4dbb1c4d4245cc7d6d8443d817d35eb6ac5cef75428c31a2083a34c8735363c037ff2c6095a4c876919d10f4dcaf","ssdeep":"12288:/gdkVrTMAgPkh7D2m7Epbemzyv3uFzIRq:/gMMdkh7D/Alhmi","tlshash":"cdc423caacc775b2d4ecc9d3869bb961e4f6120ee59305c65122f42344e363be6dc892","first_seen":"2025-03-25T21:21:04.829009Z","last_seen":"2026-05-13T09:47:03.007327Z","times_seen":29,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/Aleksib_830x1044.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/Aleksib_830x1044.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=Kfdivnxbyu4e1Y5D; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=YLXKv2NzAdTjvYUn; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 963796\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 27 Jun 2025 15:32:53 GMT\r\netag: W/\"eb4d4-197b2052c88\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":963796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 830 x 1044, 8-bit/color RGBA, non-interlaced","md5":"ac2408d90ca249f0322d941d51d99326","sha1":"50fb044adfbadbcf053ab2a0f5e7d6c6838e53a1","sha256":"32c4b0333ab30bdbc7f9fd61b8d28edf7bf2714871758db3c1d84eca8680d285","sha512":"3526c387b450144801b4618828976766af8bc1d37e295ad2cbe99c743198716ae243f588fe8b22709898fa65b730188569729381ec2fdf552096836465c32b4c","ssdeep":"24576:a6FLvR2hKRx9Nod4xy1jn9yEWw6iJCqtCS:amLvl/M2y1jIEXys5","tlshash":"7c2523db3c40136be58f1e2d0be9743cc9e5bf38af63281744501525b985ee4b6ea18e","first_seen":"2025-07-01T19:10:04.390908Z","last_seen":"2025-08-31T06:19:38.249426Z","times_seen":5,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/pages/index-cecafca6ef9d815b.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-cecafca6ef9d815b.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Tfo1OGMkvYdv4pGE; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 13 Jul 2025 20:45:45 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 10905\r\nddg-cache-status: MISS,MISS\r\netag: W/\"ba4f-19805895ca8\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47695,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (413)","md5":"3733d5afb107dc7ac2f9c0f4823feb9b","sha1":"2dec38dd7bb21cf87d89629e34b6115960086673","sha256":"5c7bf44496b13ea4a90f7cedef4b028e28a5ddbe5b21d7fea1c3e59dfe5cfcfd","sha512":"5cac377d38811e2c8d86328ca445e1be8d72886a9ffa4b2904b7a7074693b33f8c6a51ca338a23ad2d627ac61740184d44933a8854af2ed04ab7b0168f38437e","ssdeep":"384:7jSI7sOQrS3s7CH9PRjUtB7hcjYk4HCmI7C1fDvn4T4o/iOnODzVL14:HSIQMs7C9PlU3CjY/CmDrvnrOZ","tlshash":"c923a52a98b42a622c537060796f5b5db217050f9d587c247becc1a00f1dd9fa2fdbac","first_seen":"2025-08-31T06:18:01.396801Z","last_seen":"2025-08-31T06:19:38.250571Z","times_seen":4,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":153,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/87ddd3229135f8c9-s.p.woff","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/87ddd3229135f8c9-s.p.woff HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://navi30.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=yjRBLDkWE6p7FjLT; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: font/woff\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:00:15 GMT\r\netag: W/\"a108-1959ed37c98\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41224,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41224, version 0.0","md5":"375cb9c3fcdad60c78fc841e118b300e","sha1":"c8e39f4dcd3cd3be9960d13dac01a271837d85fa","sha256":"1653c1f329d10a9edd664871183d0b09866c491eb15e3f4d759c0f403ff1fade","sha512":"8d77803d079e63f16bd789b4c08ae6b30e00bb629552fe8197d069b40d7c73165d22f00f8924392c400ef9a04036152983694ddf49be5b5b8f7fd19e2f446027","ssdeep":"768:HJh/zfum85Hk/dMext52XayC9wuVzIrD9QEZiFCPb1LmemJ5a:phrGm85Hk/dMeD5SC9wu2rhpZH4tW","tlshash":"c503f10280569b87da3f15f137989243b7b8e923dc44736c11583a1562a6c9bdbccef7","first_seen":"2025-03-25T21:21:04.787966Z","last_seen":"2026-05-03T18:40:44.91477Z","times_seen":24,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/chunks/pages/_app-4de54a1809dadaf9.js","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-4de54a1809dadaf9.js HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=i9RntdudyzLPsQnE; __ddg10_=1756621087; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=wFmQI5GsV2MmZM30; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:02:52 GMT\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-length: 333\r\nddg-cache-status: MISS,MISS\r\netag: W/\"1d7-1959ed5e1e0\"\r\nvary: Accept-Encoding\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (471), with no line terminators","md5":"5bc72c5fc568dcb76390d89092a56fbf","sha1":"dd2318c9e4d16f4a63b3d57827c866a94397e2e2","sha256":"80ab88f6c9705a640d2462f4c58bf175d9d000cb9f3adf3f91e5927cc4df5a46","sha512":"2fc55efe9496f19fdaae35de2a8b21f968a0f082ce71583c11a96a34acc4f2872ff252a3c9ea1f058e27deccea81e1fb5c96b14f29068218ed2eb44c8a72e588","ssdeep":"","tlshash":"b2f09e843cc2b424116350f402bf201e72bf1d58349c654197b2e0c97e7194d9012f4c","first_seen":"2025-01-09T10:52:04.332829Z","last_seen":"2026-06-21T16:00:41.987768Z","times_seen":15,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/decor-case.11242405.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/decor-case.11242405.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: __ddg8_=9uV2aB92ewVJCGqx; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=HyVCRmZoVEG1uqE9; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 241249\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:24:53 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"3ae61-1959eea0a08\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":241249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 746 x 440, 8-bit/color RGBA, non-interlaced","md5":"54bedce20ec7429f3bd03ba332bfdd88","sha1":"ee49c96c886af5d42f0d812401b7230e3ab4fae0","sha256":"996e5bf249a90391ecff872615e79a4b67435998a5769c29633e482cd3c47497","sha512":"87648080bde634b84bc7866e9074f889edbc5003c7257bacf967792051469452e34eba384c36dcbb89cd389fc2c5893f7222a36213c65aa044dd137c8a4185e6","ssdeep":"6144:4wtiLZPyTjBzxyqFwuNqxIZvznOdVuzB5S6c4K3rFpjW:Die81m1LOdVkB5S6c4go","tlshash":"6534238f46a902544526fbaed094950f3d4321b742a0bf51bad04e1fda42bffcd1da23","first_seen":"2025-03-25T21:21:04.836774Z","last_seen":"2026-05-13T09:47:03.009434Z","times_seen":20,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/case.f027bf51.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/case.f027bf51.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=qFiroQbB92FpJS4S; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 201927\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:05:30 GMT\r\nddg-cache-status: MISS,MISS\r\netag: W/\"314c7-1959ed84b10\"\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 335, 8-bit/color RGBA, non-interlaced","md5":"900fa8c5762fe62704a800d5a81b6223","sha1":"0ceb12e0c4e6c0c748a343a075e63a905826a8b2","sha256":"edec4b1bbbd1478508ca252a415d1a9ff6e541b69aa4b2dc04f82aa7e270d70e","sha512":"e22d9c424bbabdb40a89de7b4bbef2e72b23bb98c41c0c32f59a4f0493548329780f3cd857420f990ac46f4aabe49babfd25d2bbcc725208c8103a49ee8a084a","ssdeep":"6144:Pg2MGGMuTim398CbKB2jVZDGCCJJchH2NuNKXNZNdEw:PnHuGmq1k3GbchsucNn","tlshash":"171423af6be76469bb53f6d101d2620049bac3c2157ef5f4411a1b41f434bf06bf1a26","first_seen":"2025-03-25T21:21:04.80005Z","last_seen":"2026-05-10T06:08:17.574937Z","times_seen":13,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/cross.c53836fc.svg","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/cross.c53836fc.svg HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=IeVzXcFMgXoEfgid; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=EQxJEFQRkv4rIdWD; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/svg+xml\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:05:10 GMT\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncontent-length: 345\r\nddg-cache-status: MISS,MISS\r\netag: W/\"298-1959ed7fcf0\"\r\nvary: Accept-Encoding\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f911058ec41bcfcbc36d24c7f80225a8","sha1":"82826cd054c90609a2711d05582d7cf747ca2ea6","sha256":"e50eca639cc5e20c645ff52778637b3c2f8c48faca7f4fa084f547161d6c9883","sha512":"a237786d087279e6d98c39670d7040298e5b732ee6d13dd110c396665a8d4d19ccf768a961089dadc6530501b2259deb00fbbaaa27a92be6c6f748bc7cefdef7","ssdeep":"","tlshash":"db01d3a61314a0f10a0fb315c99404983a77f0f15b5904ce6fc06e87e027b960c88fdc","first_seen":"2025-04-08T10:46:38.696023Z","last_seen":"2025-08-31T06:19:38.255431Z","times_seen":9,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/_next/static/media/jL_830x1044.png","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /_next/static/media/jL_830x1044.png HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=Kfdivnxbyu4e1Y5D; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=9uYPNUecaClAwHGb; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 928589\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 27 Jun 2025 15:32:42 GMT\r\netag: W/\"e2b4d-197b2050190\"\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":928589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 830 x 1044, 8-bit/color RGBA, non-interlaced","md5":"c60996b6c59857d2a1a21aa37366ea99","sha1":"269dd89281627b38246db4b911b3bae10a9d7336","sha256":"bcc855cc79cde797d0bf584862654b445d992bdd610eafc0a4b559f9c8d694e0","sha512":"5b11e73a5a07be3bedc860c9b40c32497e18845bbd4f6328ef69f8a3b6ab2a675ba35b02a13d5aefe8fa2db5bdbcfa24c70f1b5791649dad11d98da1c11db7d9","ssdeep":"24576:JsmbW7KZWuDwvctdF1ui9oBZD6QyOR/YSM146Ie:JPVtP1ui98ZLeDX","tlshash":"38153318d939d1543e33bb3204fb5bc759e5f06ca42868fd8b5d8ac8cd7012e89d2d2a","first_seen":"2025-07-01T19:10:04.403811Z","last_seen":"2025-08-31T06:19:38.263807Z","times_seen":5,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/favicon.ico","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://navi30.com/","date":"2025-08-31T06:18:08.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://navi30.com/\r\nCookie: __ddg8_=YLXKv2NzAdTjvYUn; __ddg10_=1756621088; __ddg9_=91.90.42.154; __ddg1_=5b8Uy9ZazaUWiPgiVrzV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GnTgpZ1O1bSOM7qm; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg10_=1756621088; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:08 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: image/x-icon\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 16 Mar 2025 12:26:26 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nddg-cache-status: MISS,MISS\r\netag: W/\"771f-1959eeb7550\"\r\nage: 0\r\ncontent-length: 30262\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30495,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"7b418b6bb7e77889587beff7aa7904b5","sha1":"ada023a50dde43292e058062a30df3a21868fb40","sha256":"a7c3f4690e65f8fd90327b36f0f11371e5c54af3fef19e7b257f7c6c887d6602","sha512":"5af6c0a98ae621d8e410b9f52e1a0e270b745a4ecb257bb0b82700bf072a8b8a89ba810b24c18e99b3b3d220c5ffba08a70683c725709436343506a3c21bc5ee","ssdeep":"768:8pRNoZtIm9MLHT+gc7BWYi6Mqt0aPE92ed5l96+:8gIm9MLHiFhZMrMuTdLJ","tlshash":"f8d2e1ca44a576abd768920d81b43fe73e080cddb05c48550bdee2e2d460fa2493ead7","first_seen":"2025-03-25T21:21:04.854128Z","last_seen":"2026-05-03T18:40:44.931224Z","times_seen":24,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"navi30.com/","fqdn":"navi30.com","domain":"navi30.com","tld":"com"},"ip":{"addr":"186.2.171.13","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T06:18:07.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"navi30.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 16:12:16 GMT","end":"Fri, 17 Oct 2025 16:12:15 GMT"},"fingerprint":{"sha1":"26:C3:C4:A6:60:A5:28:FA:9E:AE:B2:AB:6C:E6:94:82:2F:05:C5:21","sha256":"31:61:0F:75:65:28:FB:BD:EF:94:52:37:91:B3:36:E4:E3:78:68:85:A3:0B:0D:7A:83:67:9A:82:82:05:95:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: navi30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=i9RntdudyzLPsQnE; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:07 GMT\n__ddg10_=1756621087; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:07 GMT\n__ddg9_=91.90.42.154; Domain=.navi30.com; Path=/; Expires=Sun, 31-Aug-2025 06:38:07 GMT\n__ddg1_=5b8Uy9ZazaUWiPgiVrzV; Domain=.navi30.com; HttpOnly; Path=/; Expires=Mon, 31-Aug-2026 06:18:07 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 31 Aug 2025 06:18:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"2798-XxGLnt65UcsUPYtk5JjtH73ubuM\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10136,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"73161b77b74d5df3b7ac8941f07c9e24","sha1":"5f118b9edeb951cb143d8b64e498ed1fbdee6ee3","sha256":"419c66b7d7efc823ef5900fb60452ccce282dc6761314eabb0f3ed3f4527a642","sha512":"2494c6e7c4ae501377d8270fd8403981421facd098e99675b5a374ab4148d05bd138096733ec2b025c9c7efcb77a18a1a1c56e7dfef1d1cd8286f6bcb5226e73","ssdeep":"96:InZaVH3O2uH1qEw39f9Iu+jqNur0XHxQsK1kNu0qS7upVgdblSRvEktW85UKnF+S:InZaVH+2uH1qr3bvRHKoAhKLup","tlshash":"a4220150dde5cdc6212e81ef28b5761a6e85e923da16098c73ec86e04f57cc6ee834dc","first_seen":"2025-04-08T10:46:38.710644Z","last_seen":"2025-08-31T06:18:35.256159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":123,"dns":77,"connect":18,"send":0,"wait":229,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-31","alert":"Sinkholed","trigger":"navi30.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}