{"report_id":"14ccc549-f6e6-42cb-9c46-6bff0b4d33e5","version":0,"status":"done","tags":[],"date":"2026-09-06T08:18:43Z","url":{"schema":"http","addr":"learnquester.pages.dev/category-top-down251.html","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"learnquester.pages.dev/category-top-down251","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"title":"Top-Down251 Games | Play Free Online | LearnQuester","dom":{"size":73883,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22898)","md5":"b73c10ad84143888801d742abf33f7cb","sha1":"475b1e20346437c26bedfb6368f09a3fed7b50a0","sha256":"a7715a04b30e4ad4d7c9f1802a630a2383fa938b646c29572b8834b5d671856d","sha512":"523ebf84002d608aae6ae06bc39f15d06fb03bd50432ffe68fb4810e3cd9c3418f99519515e11f5f0035e938e733be600976af39078e2aa46c06f82fa56d679c","ssdeep":"768:7iiSslFiddRCJWHtyzeWeWedzepze+0E03EOtvMn7ag4/EYzsWN:7B0d77HtMeWeWele5emim7ag4/EYzsU","tlshash":"427301a84ffd08b0655792ea52e2534e66a25143f1039edc74acdae1cfdbec4c0bb254","dom_hash":"domhash19d005d9041c879be86f98f376e09b90","first_seen":"2026-09-06T08:18:49.290345Z","last_seen":"2026-09-06T08:18:49.290345Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"learnquester.pages.dev/category-top-down251.html","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T08:18:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"levitydinerdowny.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-09-04T15:10:33.193473Z","alert_count":0,"request_count":22,"received_data":1403827,"sent_data":13206,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-09-04T16:45:58.612354Z","alert_count":2,"request_count":1,"received_data":2264,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"levitydinerdowny.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-12-10","domain_rank":0,"first_seen":"2025-12-19T02:12:54.185522Z","last_seen":"2026-09-05T03:33:57.700585Z","alert_count":5,"request_count":5,"received_data":287667,"sent_data":2768,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"workdeadlinededicate.com","ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-11-13T08:41:33.674059Z","last_seen":"2026-09-03T00:48:10.285841Z","alert_count":8,"request_count":4,"received_data":9702,"sent_data":6260,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.bakestubborn.com","ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-31","domain_rank":0,"first_seen":"2026-08-31T15:31:16.269507Z","last_seen":"2026-08-31T15:31:16.269507Z","alert_count":12,"request_count":6,"received_data":182079,"sent_data":3037,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.158.24.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-09-03T06:58:46.864624Z","alert_count":0,"request_count":2,"received_data":1050,"sent_data":1004,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"exemplarfederallithe.com","ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-25","domain_rank":0,"first_seen":"2026-03-13T08:54:53.300834Z","last_seen":"2026-09-04T16:19:54.605488Z","alert_count":49,"request_count":49,"received_data":117191,"sent_data":77633,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":8,"received_data":312980,"sent_data":4538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"portalfluently.com","ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T16:11:46.270184Z","last_seen":"2026-09-05T06:11:59.505407Z","alert_count":2,"request_count":2,"received_data":76980,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoologyfibre.com","ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2026-05-23T09:52:15.201176Z","last_seen":"2026-09-05T20:22:38.117709Z","alert_count":2,"request_count":2,"received_data":1596,"sent_data":1152,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":2,"received_data":36557,"sent_data":1040,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"spendsdetachment.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-05T07:40:04.892598Z","last_seen":"2026-09-05T22:01:25.998078Z","alert_count":28,"request_count":14,"received_data":24686,"sent_data":24934,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"learnquester.pages.dev","ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-09-06T08:18:45.061973Z","last_seen":"2026-09-06T08:18:45.061973Z","alert_count":0,"request_count":7,"received_data":292464,"sent_data":3503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mamshirt.com","ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2026-07-24T11:08:27.428544Z","last_seen":"2026-09-04T17:01:40.501749Z","alert_count":0,"request_count":4,"received_data":22652,"sent_data":2726,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"101cfebf03e01a2ddb4e9f357586e8fd","sha1":"663217b0f7c96f2c96883a7a83c6237514ee3cdc","sha256":"2651e6930749005f3b0fcc8cdcf44765c2e1afb0ebb0ae9cc3f8c6736271f159","sha512":"aca54ebd7e6c67a818ec425d7925a2cbff012c68410d37940986ed0132254af73b631384676728db8f056daa0838587de6f4df64d4f0c1aefdee7ff3373acd32","ssdeep":"","tlshash":"5421b7902135a28bd1e9bad60985073c3f7245affa454185cf3de967e7c32198f610f1","size":1292,"data":"","first_seen":"2026-09-06T08:18:49.338732Z","last_seen":"2026-09-06T08:18:49.338732Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/88/88/a1/8888a19c6a1141f12aba002c4984b9b9.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"536e804bd9ba6658f2ca9ebbe3243cd8","sha1":"3d944525613dc956b8496982293b7a7ef2d9c1f0","sha256":"be481d54e42065254a5de45f472f5aad5ce98e69b7ac4c5c482609f089ac5421","sha512":"afa68bd0d813be532f7fe766ea0f54be8034a37dd7a4f63d8e977061727c6550d6279187060ffdd1d90f8836f7ee332d06a3618000780b2b4f642665a006b737","ssdeep":"768:V2tRfLdni5RtHYDoZvR1HbwDJIKaE1KmPjvZeOLXdts8pTLC0s6pBA1HOoqdnbqX:6Fi5PZvRNKdgh8Kafp7Hh0v1GQ/Ce","tlshash":"3053e68a2f5fa16913b1a8fb3217a031e016dc83b099d4d8f02dbd8c6f66319b57656c","size":66344,"data":"","first_seen":"2026-09-06T08:18:49.317069Z","last_seen":"2026-09-06T08:18:49.317069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"908e9bb38af672f5e6d2fc6da61be1fa","sha1":"2d42d754a3ad866acf42bb949998f8c6964c8d4f","sha256":"6c8286e945c66bc64562cd624e3c8badbe76e400995987f4e9217788ba4e6aea","sha512":"bfa4b9832988b70be064d121673aefc615cc1fe28155f82612dcbec72d20e4ebe417ec20617053c693d07f6bb4374aea128dd036b8c0f85d23b1fb9c90a997e7","ssdeep":"","tlshash":"b631f77b294a11b2cb33e732c2ce236f1e75aa6727a406c294515f502e2a4f805bcdd8","size":1507,"data":"","first_seen":"2026-09-06T08:18:49.339892Z","last_seen":"2026-09-06T08:18:49.339892Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"17c81816e1d47556404b4ff5d1c2bef8","sha1":"4036ea1f2f978d7b85a436adc7053fd0b2a0bc65","sha256":"c184c7bb54daf8acb071645a1416ec43b0e5f97eb631bc9ce5ccbdfe4451b63f","sha512":"924c79d15fb84de44240e45ba9de57e93ea72b37d1f83d330c222fc028443d7b7aa88074cc44a065169534eda6f3331ae3fb132b5387833dfc314377b2e9aca7","ssdeep":"","tlshash":"e4815d651db4d17e616771ae26eb2a183d32410b5900d986ff3ce7535f507f80ea9cc8","size":4053,"data":"","first_seen":"2026-09-06T08:18:49.340792Z","last_seen":"2026-09-06T08:18:49.340792Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b2235271c16f8771b21b86e1f28b646","sha1":"79076a682bb500cf7ce5a0c3b7791f444f0b4745","sha256":"2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae","sha512":"0a0a45fdba13e92501476f4744c492c70dcc537f521bf5e0ab08d58af1a1103327d809cf576eb79563a6499816136234f93a523d78ef709986808215dab780e9","ssdeep":"768:2bau76Vkz0LIRCwNvDVlW2WE2FXgi+7RB6hJgbGNqJXY1ATJSf5Rr+LPL8jvZtd6:2GMtW7Qi+7RB8JMGNqJLLFNZB","tlshash":"510329d87193b03993b718e71477a214b23a1c15300a9983e17e5c863d63e5bd23bfad","size":37950,"data":"","first_seen":"2026-09-03T11:38:17.004803Z","last_seen":"2026-09-23T03:04:04.362436Z","times_seen":4011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee3d1e4b40d51a50a476df29c64df2d9","sha1":"484020b7589c84e5f02524a6b27be306c0d32303","sha256":"0e27002bc66c57d7928b1d4a204e1130d3f251fb541f841b7a5133d6dc168507","sha512":"7648666053dd417e59dde1661e527daa5e43da1ea7022380ac3d13d1d11f64ee846b1c9d7d05a7d6c8a7e3672ceafd5a0950818c4c840c55b827f5e90a83579c","ssdeep":"","tlshash":"2231be2b755c5b581b52f125e40637ddba32649bad2e4236711c05cc0fd472bc2b64f8","size":1491,"data":"","first_seen":"2026-09-06T07:11:29.896249Z","last_seen":"2026-09-07T05:25:38.956317Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c27ac1081019e0a30a8474ca25b73300","sha1":"688d8a53fa0a0693da94637c4ae02e11e86bec4c","sha256":"7fa48fd0327cb1f25d842a3a5e5d1925d3f27c5c9b9bf06cf4b6838d0e696373","sha512":"ff3bf105839850b2953ddd1423cbe242fcb5be992a9f3e3a3caadbff5ac1473cfcf10d6e4705cf03ac7ce0c84ff27d69ccc6e44b3a99ec9156a7dcf17a80a8bd","ssdeep":"","tlshash":"a981f96a0dd58078a922a52f52ea720d2e72954f27008841f99caf059f94bb00ebddec","size":4052,"data":"","first_seen":"2026-09-06T08:18:49.34255Z","last_seen":"2026-09-06T08:18:49.34255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"eeb10fee96f76e633397b6b799b6cbb5","sha1":"8fbd52f77109e3b82afe2e0611370b212da239ae","sha256":"51f02a90bdde5f380cb3553f6d10d921d489ae6d9e384e9355065bd725179cd2","sha512":"14914816fd56501dcd100fc8614d0cdb7def58c1f4e25f1ef3f20037abf443caa223b615795f9fabaa0d83f96d2d39e23ed9cacb91cf9b7c21c233f32c231633","ssdeep":"","tlshash":"ea312c36152c867e977bf27530df7e580c3521034c1066caa72ee35627104fd226ec05","size":1507,"data":"","first_seen":"2026-09-06T08:18:49.34371Z","last_seen":"2026-09-06T08:18:49.34371Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/ads-manager.js","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23e4d0c13ee336c8251f0b6a7d198c94","sha1":"a68d801c380d526b1b66b1a49fabe5223d8abc50","sha256":"e0e28d3ea4329d9d2bb0b9fa4c3c759ecabbd5dcdf6f42a2f258add25a599393","sha512":"eb9bbfbb190ea182af40a22d87b7e469d1af8abc39b8621959157086f564037aedb30a524bd8ae2cbdec03a188cbbb1d58e1dcc8b25e4b994df83219a6b7eece","ssdeep":"768:WKVit2nD2u8wLJTvLE6b6OyOF/pJcIl6XHt3:WKVW2aJwwE6XHt3","tlshash":"ba0385092ef72031a11b80bd4f7792597a245407b007ddad7e9c92849fc8fe59db2be8","size":40119,"data":"","first_seen":"2026-09-06T04:02:35.150725Z","last_seen":"2026-09-07T05:25:38.953083Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/9ef44dd83283964d69db6c29b16ed596/invoke.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a578a69b8072fb9ed350f86949c77b4","sha1":"ba342215633379025442adf1e3f8dd232a0294c2","sha256":"7689eb1da30423ee75ac6ea8ed46ea7faaf9910d1f1a3a0e543a383283f66b74","sha512":"0e4515ef16991c8077dd4d7c1cb5a1e179e2cb5f4be449ee1388b98f632182a5e375bc07d1302c181df76413e9498a2734e38fa15ee5732d5573ca007663663e","ssdeep":"768:g8arXCBsHNZfc8f2L9mxW64tUVJSt2PatHX6NMB/XL0SdJzzuCPlrBzkYrJEOlh4:WNfQ9mxW6YSJSt1sMuIplPU9/IgoDynX","tlshash":"ee23f9e36b11e72c42e064f32a2a9935f01add46b4cc97d8f17cbc486f9e7178a78524","size":46043,"data":"","first_seen":"2026-09-06T08:18:49.299143Z","last_seen":"2026-09-07T01:02:37.240419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/2a362e5cae20c33eeea29a03144bdf06/invoke.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10bd70442f94ceaff2298dca9e1af7e6","sha1":"e9a7eb57e47d7e87cf73d3f33b331a95e155bf1b","sha256":"414068c27bc0875dc3b1a7a077ea730adeb3d354884007091dd357bba6cee385","sha512":"4c1cd8b469eeabf551600cca2543f6fb7dd6511375dcf691a02bae6661922b391e25f5c432e2c714325ce20d43a7bcceb75b7aceffdf73a0e7f1fe7054cce2dd","ssdeep":"768:5Zci1XerBzdkgAp8PIzvm6epOQQy3hN1xQ3L6gGh5XhVEZMRvjTWuVq5Amzy3iyr:0i1uDPHdyZsTBqVyWXfIfJ6myF8ZjSha","tlshash":"8e23f9cb7f91906413b1adf3b32ba539e549dd15b58cd4c8f07d28886f63362ac36628","size":49008,"data":"","first_seen":"2026-09-05T06:17:19.68881Z","last_seen":"2026-09-07T06:03:02.762661Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b4ca1eca5a0b1b5fb5313de05d9f8d5","sha1":"eba899e436b47d7b39999b18287dc7a7002656c3","sha256":"f80beb2f6a30919d181cd960142c181c408a3277e5a462250a4e005a951def9a","sha512":"1b1305f339665c932a5cd420797502553b5f8ae4d6d23ede3d73b1ffc320578b689a09a2632aca44ad8cfadf0843271882e91cdd36fc5fe6534b169dfd79b73b","ssdeep":"","tlshash":"56c04c5eea41a62eb614765eab8a33c1dae34b86692125255364c355f4dd436148084c","size":145,"data":"","first_seen":"2026-09-05T03:34:02.233271Z","last_seen":"2026-09-21T12:40:09.965489Z","times_seen":3029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/2a362e5cae20c33eeea29a03144bdf06/invoke.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6444fce7a505013c2fd43af8ff2d51b7","sha1":"70cc55ae9b6427c17c231fc3df7487b316116fe2","sha256":"2a2ba0859f87ffbc75d7308e67c2df95410250c5d352d590c5a73df3c0d02b78","sha512":"e0038710fe15c02caa9be650804ec9ad8df515726466b58199a4a6acf2b9b34c3c654249cbc32706a1b14fd3fcaaa6c72118445683e4ac16a9ce5c7bd43f3464","ssdeep":"768:5Zci1XerBzdkgAp8PIzvm6epOQQ/i3hN1xQ3L6gGh5XhVEZMRnjTWuVq5Amzy3i4:0i1uDP68dyZUTBqVyWXfIHJ6myF8ZjS8","tlshash":"f923f9cb7f90906413b1a9f3732ba939e549dd15b58cd4c8f07d28886f63362ec76628","size":48992,"data":"","first_seen":"2026-09-05T03:34:02.212813Z","last_seen":"2026-09-07T06:01:51.616083Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/js/jquery.min.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89492,"data":"","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-09-22T22:32:22.464681Z","times_seen":8981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/59/3a/e0/593ae0a2fb3fa3045dd2b8ce649908ab.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98d2bb9579e80d8c032027a906d1637c","sha1":"1b7aeb055a6b685a0906b497fd33ec9348e56466","sha256":"2d109b8f04a3dcf08efa0871e43842447a978871b1afcf5d450b5332436de697","sha512":"6fceb97281cfd44f451a5750ef7212639d60e1977de9c92d0f5b4abf3695951cb45aa581fc90d0753dbc32e965822abcdf4d218865df1462cbca82ac552e3a78","ssdeep":"1536:0AcTGrdD6D9d9SUaXt0KiKBcMrDOSOBS1cwnJHPPwIElX:pZDK9jBuHtOBZwnJH1E","tlshash":"3663e8dc7f18a1a216b1a8b3221e9275e069cd45b5dce8ccf07d381c2d67366b87da34","size":73046,"data":"","first_seen":"2026-09-06T08:18:49.332296Z","last_seen":"2026-09-06T08:18:49.332296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/9c5d14453d6b11cdec5b98e5ce5af0dc","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","size":4366,"data":"","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/category-top-down251","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f78c43731d76bd6949a720b1c6ab6f40","sha1":"acecd316984df6b1b344d386b7715143288f17f4","sha256":"c701c7ed1100f3d95f0da8b02435bcf079e0d7a68dde609008834ba71fb518e8","sha512":"c81d938e15544a7279d6fe7bbda115a4d4ed7dcb4611aad0faacf446ea50de33d912a5d48b4a1ca3be6adae7df4ff38bc81d5a6e7a243fd11735cafd0d00beed","ssdeep":"","tlshash":"e2e0923777a6083292a791f9179a967c3ab300471446fc0c3a4c9a0a2f42f5c8af27e5","size":406,"data":"","first_seen":"2026-09-06T08:18:49.34511Z","last_seen":"2026-09-07T05:25:38.95383Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/category-top-down251","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47afc3d91d9fe3d2e5ab576d1082cd10","sha1":"41eca4102c5805a7c4f23168b955e1d0a2230a51","sha256":"fd770367f62d345009d33b02e5695d567207b04be5564b4ce2a61c83531d8a3e","sha512":"130d26f998f701bad7cc01bc25f1fb220ec4aa166b62403a6cda44e4cfe64309494efe302bd25fd648001acb0799aec4358fbe83290f3f00db8028a5fbbe84dd","ssdeep":"","tlshash":"bce0ab2998e706384cf63a481034ca7934f878a0aaa3d057625cc83ccd39fc54c10aec","size":424,"data":"","first_seen":"2026-09-06T04:02:35.169868Z","last_seen":"2026-09-07T05:25:38.95441Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/5323869a8beda1d7db01e9c875b2f49f","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","size":4366,"data":"","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/1b50e57a5911fd0a5b46962ab48ca22b","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","size":4366,"data":"","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"951101d964c88f2b55d5ca20a0106697","sha1":"6ce9342f7060b3c4640378973ecf0cbd74b18471","sha256":"591d4c9e628d4d22af8b24e4614f65362f91edb810e9856000fbf1bc6da7b901","sha512":"608e5006e31f1213350b0826440f4711b94ed05246dcc640f215e075555a9734d003aab6b98a6897412cf74fcf3857f3b21111dd45f210513427d7043961a8fc","ssdeep":"","tlshash":"c5212b140959c46cbb11ad9a02d2319c377f048f63918070949f254ae0c6730c3a7dfc","size":1292,"data":"","first_seen":"2026-09-06T08:18:49.347065Z","last_seen":"2026-09-06T08:18:49.347065Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🎨 Ad layout stylesheet injected","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":1040,"column_number":11},{"level":"log","text":"✅ Ad config loaded successfully","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":106,"column_number":15},{"level":"log","text":"⚠️ Anti-AdBlock disabled - skipping check","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":119,"column_number":17},{"level":"log","text":"📦 Ingesting all active ad configurations...","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":336,"column_number":13},{"level":"log","text":"📢 Loading ad: adsterra-300x250-sidebar inside sidebar","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":421,"column_number":13},{"level":"log","text":"📢 Loading ad: adsterra-728x90 inside ad-above-iframe","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":421,"column_number":13},{"level":"log","text":"✅ Ad loaded: adsterra-728x90","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":456,"column_number":17},{"level":"log","text":"📢 Loading ad: adsterra-300x250 inside ad-below-iframe","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":421,"column_number":13},{"level":"log","text":"📢 Loading ad: adsterra-728x90-bottom inside ad-page-bottom","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":421,"column_number":13},{"level":"log","text":"✅ Ad loaded: adsterra-728x90-bottom","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":456,"column_number":17},{"level":"log","text":"📢 Loading ad: adsterra-300x250-middle inside ad-page-middle","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":421,"column_number":13},{"level":"log","text":"🎯 All ads initialized successfully","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":123,"column_number":15},{"level":"log","text":"📏 Starting ad scaling system...","filename":"https://learnquester.pages.dev/ads-manager.js","line_number":61,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.158.24.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.150Z","timestamp":1788682696150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\nset-cookie: uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Wed, 03 Sep 2036 08:18:16 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-7a90-9bcc-44dd19af834b:1:1","quoted":false,"path":"/","expires":"2036-09-03T08:18:16Z","raw_expires":"Wed, 03 Sep 2036 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Wed, 03 Sep 2036 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":525,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ff8843b8f40e7151c361a7e54cf48d55","sha1":"64dc31a6c4ab864e87a6ed6fe9a48f9493b7b41e","sha256":"1e024b301aaa239cda3c7d1b86508c95509f5c80cd6002483a082caa7be8b80c","sha512":"2da952db9fed176fa041143137b11c7a144677f5e6fd170a08d41487056adb01638cf6693236492121d5446d35ba9f0363650c05b334d3466bddab0af61aa18c","ssdeep":"","tlshash":"05900400c4fcc1135d0477501c55750fd0414000314cd074445fc0411dc157fdf30545","first_seen":"2026-09-06T08:18:49.291552Z","last_seen":"2026-09-06T08:18:49.291552Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":33,"connect":21,"send":0,"wait":22,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2e5Odzrt3hZ_Lrs74q6s4EHrN1OTTndvV3WSzclx1fMIIl6EzpfMzB5kUTzsVTMeBEHYPjngDoJHL4IgHiWZ4KgF9d6r9x6vvvfxfTQrTkgbBT1-_Wo61XFMLwZtp_ncTZ2IdGya1240XaftXGre1EnXv9ScrEw-esnt-G3n-eZrkg_Si57jOo7ruM1XdS5VOrm4rkJn99woaHf9tuv22m7gYZL_P2OKOgytQ4xOyBPQonr8V_U2NF8iGX75sjQDm2YvvjIsYmrTHCNx-GYySNJxguFZqPIaVHK46UZqKkI-qyNNDjdbIB0tVluA6YrULzwESw43UMFG-6doWQyZgIlHMR4tIeMlNF2Cp3egxQMCcIFrW0iGB9fSfExvn1bpqlqRxp9_QI8r0nh4Hsnw3uVYT5rX07iwOk0MJqqEniyh-0tkxRJ2WoceH4Hb96HFj8SpP4VkuH-VFjmFFsfPOC51woCzluoGUSukkdOKGOct3xfCjajqdXy25kirJaipoVhdXUOh6iiyOobiuEmjnmJR16eRVKESjhtyGnQ6UegHnuryAAXfhRZ74PmHiyLhZubezcS2HYz8aGHzQh6skn40c78o3sliL_J7oecEM_fgtGvdgyzfvSs6oeww7s8oBnoPRtRgLMFIlPsiNp4pD0RsCuZuvLfxnXKe2v6M7qe2LxMCmu8hF-VCZ7fMHXB7bj5VRszTlaHMlnPKRDnXwhLkt_5DEvVaYdfxWj3pq5avVBR6oRsKIRbK2KKcZRtt1b79XWIgj5uRVCsuex2v14m6vuhGgnW5FzG3K0UQdWF0CW3qa3KnuiJv3f8Zma5I7clnwegRTHwErs-BFi7ouATdLjFNvt6mSb9Ph9K0-9puF6ytU4i0RGYbsLdrkJbM4hNyfv7GjcvfrJVzZWcbkv9ANgc8L5HlJXb0dwT9ePerrczqoZ7SlZSuW2rlI6D6wdZf4Loij_32y1rTL3z6E3j2Hkz2z6R5bLLV-AwmJWDZOcSaIJZnX1FWwvzrzc7imfkA_bwBFjfmLM4bCxbn8ScVkfcvVOTKux-vcW-m6-OmI3zp8ogGoZJBELDA97hSzAk91el4vQjWVDufP_393wMAWie_1G0EAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.437Z","timestamp":1788682696437,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2e5Odzrt3hZ_Lrs74q6s4EHrN1OTTndvV3WSzclx1fMIIl6EzpfMzB5kUTzsVTMeBEHYPjngDoJHL4IgHiWZ4KgF9d6r9x6vvvfxfTQrTkgbBT1-_Wo61XFMLwZtp_ncTZ2IdGya1240XaftXGre1EnXv9ScrEw-esnt-G3n-eZrkg_Si57jOo7ruM1XdS5VOrm4rkJn99woaHf9tuv22m7gYZL_P2OKOgytQ4xOyBPQonr8V_U2NF8iGX75sjQDm2YvvjIsYmrTHCNx-GYySNJxguFZqPIaVHK46UZqKkI-qyNNDjdbIB0tVluA6YrULzwESw43UMFG-6doWQyZgIlHMR4tIeMlNF2Cp3egxQMCcIFrW0iGB9fSfExvn1bpqlqRxp9_QI8r0nh4Hsnw3uVYT5rX07iwOk0MJqqEniyh-0tkxRJ2WoceH4Hb96HFj8SpP4VkuH-VFjmFFsfPOC51woCzluoGUSukkdOKGOct3xfCjajqdXy25kirJaipoVhdXUOh6iiyOobiuEmjnmJR16eRVKESjhtyGnQ6UegHnuryAAXfhRZ74PmHiyLhZubezcS2HYz8aGHzQh6skn40c78o3sliL_J7oecEM_fgtGvdgyzfvSs6oeww7s8oBnoPRtRgLMFIlPsiNp4pD0RsCuZuvLfxnXKe2v6M7qe2LxMCmu8hF-VCZ7fMHXB7bj5VRszTlaHMlnPKRDnXwhLkt_5DEvVaYdfxWj3pq5avVBR6oRsKIRbK2KKcZRtt1b79XWIgj5uRVCsuex2v14m6vuhGgnW5FzG3K0UQdWF0CW3qa3KnuiJv3f8Zma5I7clnwegRTHwErs-BFi7ouATdLjFNvt6mSb9Ph9K0-9puF6ytU4i0RGYbsLdrkJbM4hNyfv7GjcvfrJVzZWcbkv9ANgc8L5HlJXb0dwT9ePerrczqoZ7SlZSuW2rlI6D6wdZf4Loij_32y1rTL3z6E3j2Hkz2z6R5bLLV-AwmJWDZOcSaIJZnX1FWwvzrzc7imfkA_bwBFjfmLM4bCxbn8ScVkfcvVOTKux-vcW-m6-OmI3zp8ogGoZJBELDA97hSzAk91el4vQjWVDufP_393wMAWie_1G0EAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0a8dac0df0e819b31203145684d3305c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSS4gcVRR91RkEcSFI_MxGSgiiYPe8-nclu-BnlYmaSARx8X7V8zLVVZV6Vd2d3jgx4noWLtwINafnsxCCwYVb7ZGACMLUygEzGzfuFATX0pPGiXmLe-975_LuPYfz-U59Qnqo2fG7V_KpTlO2FvSo_doNncl8bOz167ZDe_SSfUNnoX_JnixCObroeH6Pvm6_o8RmvuZSh1KHOvbbulRJPlk7RaGLe04c9EK_5zj9nhO4mJRPvpjagmEW5OiEPAct22d_Tz6CFnNkw2_eVGazyos33hrWKavyEiN58EG2meXjDMOzMiktJNnBshu5aQn5soM8O1iyQD7aXbAA1y3pvPAQPDtYrgo-2nu0LU-hMnD5DMajOVR6CM3mEPldaHlEACGxfhXZcH89L8fs9iOULdCWrPzzN_S4JSsPzyMb3ruc6ol9LU_rSueZwSRpoCdz6MEcRX2IatqBHh9CVJ9Cy18I7byMbLh3hdUlg5bHF6jDaBQI3k3CIO5GYZx0mSfdruwHkvLA9VRITzXSyRzMdFAbC7W2UCcd1EUHQ3lss7if8Dj0WaySKJHUiQQLPC-O_MBNQhGgFneg5TZEuYWi3MKm_qIl1urHR-TXo9X9o9WvYWQHpmqJ9d4nGMlmT6bGNc2-TE3NnWV2l9lrZnk12GF7eTVQGQErt1HKZlcXt8xdiOrcbJoYOcsXgfGqmTEum5mWFUF563HKQkTdSIRBl_Ud3lUxkyrwKe8H7m5iqvp_rQt1oiDuxoKLrhcmvt9nUZD40U6xtJP1w18DbKpj22Ve6KpAMOVS4XlKKebGjHqO73OZ0BBGN9CmA2YsTHVLPvzuNxS6JdZLr4KzQ5j0EEKfA6tfBBvPIrcPtoGYYpp9u8GywYANlekNdLVR857OIfMGRbWC6rYFVZGd9IScn71__fL3p45RD-5DiZ_J8kCUDYqywU39I8EgvXP_alHpoZ6yhYWuVaxST4Hpo40_IHRLnv9TnXr54oUHEMUWTPHfT7PUFC1R06dhcgJeEKSaIFVnoxhvYB6787N6x3yGQWmBp9aMpyXZ5WmZbsPoY7vvupQKx41lHPix109U4DtRpALHCxX1AlSmvfnVKz_9OwBO_VKsUQQAAA==","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:18.033Z","timestamp":1788682698033,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSS4gcVRR91RkEcSFI_MxGSgiiYPe8-nclu-BnlYmaSARx8X7V8zLVVZV6Vd2d3jgx4noWLtwINafnsxCCwYVb7ZGACMLUygEzGzfuFATX0pPGiXmLe-975_LuPYfz-U59Qnqo2fG7V_KpTlO2FvSo_doNncl8bOz167ZDe_SSfUNnoX_JnixCObroeH6Pvm6_o8RmvuZSh1KHOvbbulRJPlk7RaGLe04c9EK_5zj9nhO4mJRPvpjagmEW5OiEPAct22d_Tz6CFnNkw2_eVGazyos33hrWKavyEiN58EG2meXjDMOzMiktJNnBshu5aQn5soM8O1iyQD7aXbAA1y3pvPAQPDtYrgo-2nu0LU-hMnD5DMajOVR6CM3mEPldaHlEACGxfhXZcH89L8fs9iOULdCWrPzzN_S4JSsPzyMb3ruc6ol9LU_rSueZwSRpoCdz6MEcRX2IatqBHh9CVJ9Cy18I7byMbLh3hdUlg5bHF6jDaBQI3k3CIO5GYZx0mSfdruwHkvLA9VRITzXSyRzMdFAbC7W2UCcd1EUHQ3lss7if8Dj0WaySKJHUiQQLPC-O_MBNQhGgFneg5TZEuYWi3MKm_qIl1urHR-TXo9X9o9WvYWQHpmqJ9d4nGMlmT6bGNc2-TE3NnWV2l9lrZnk12GF7eTVQGQErt1HKZlcXt8xdiOrcbJoYOcsXgfGqmTEum5mWFUF563HKQkTdSIRBl_Ud3lUxkyrwKe8H7m5iqvp_rQt1oiDuxoKLrhcmvt9nUZD40U6xtJP1w18DbKpj22Ve6KpAMOVS4XlKKebGjHqO73OZ0BBGN9CmA2YsTHVLPvzuNxS6JdZLr4KzQ5j0EEKfA6tfBBvPIrcPtoGYYpp9u8GywYANlekNdLVR857OIfMGRbWC6rYFVZGd9IScn71__fL3p45RD-5DiZ_J8kCUDYqywU39I8EgvXP_alHpoZ6yhYWuVaxST4Hpo40_IHRLnv9TnXr54oUHEMUWTPHfT7PUFC1R06dhcgJeEKSaIFVnoxhvYB6787N6x3yGQWmBp9aMpyXZ5WmZbsPoY7vvupQKx41lHPix109U4DtRpALHCxX1AlSmvfnVKz_9OwBO_VKsUQQAAA== HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl29487207=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:18 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ed64421a66ce39b57f343207a51ca4d1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=470","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.089Z","timestamp":1788682705089,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=470 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Model, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.631Z","timestamp":1788682705631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 02:37:24 GMT\r\nexpires: Fri, 03 Sep 2027 02:37:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 279661\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":21369,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-09-23T01:55:27.919476Z","times_seen":45290,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/category-top-down251.html","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T08:18:13.438Z","timestamp":1788682693438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /category-top-down251.html HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ndate: Sun, 06 Sep 2026 08:18:13 GMT\r\ncontent-length: 0\r\nlocation: /category-top-down251\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQN58GEfoX%2BdXc%2Bl18godHHFuZuEH1iG1SLr8aPWzcc2qYh5y1KXGRl1k%2FXCZGGuu3vSR6ibmRSk8u01u3oVR%2FgjTjRiDT4yez8HU18mxXiIUCzGllbS1RFMV3TzXPLed%2Fe7pLcfnzL9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-ray: a36c0ab22ed10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/1b50e57a5911fd0a5b46962ab48ca22b","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.259Z","timestamp":1788682696259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 16:05:40 GMT","end":"Thu, 26 Nov 2026 17:05:35 GMT"},"fingerprint":{"sha1":"BC:77:44:FD:F1:4E:49:75:F1:D1:4B:79:5E:0C:25:1B:61:78:53:C3","sha256":"27:14:1A:D5:8D:DC:F0:58:04:A8:C7:F1:58:29:46:06:3B:1D:5B:D4:A1:B5:75:53:59:6E:AA:82:C8:D7:D3:65"}}},"request":{"raw":"GET /17/1b50e57a5911fd0a5b46962ab48ca22b HTTP/1.1\r\nHost: mamshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a075cb-f605-7b65-97e9-f972e7969af0_1; __cf_bm=H.SLcLrpcnZ2RQuqGJgJCPqKhq7LYlMs8fFINSyEDz8-1788682696.1750274-1.0.1.1-qfuJnHgtbjMN18a3FGYVQ5RVW8no4i7D3ZhBPE0YKFDgzv3DTq6lRkXO1z43NKyw9L7PzM9DNpDIEoOAGH1jP3F06nau5he2oUNTJiVSlWEQPG.hsmz3_DaP__80zV_m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua\r\ncontent-encoding: gzip\r\nlink: \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 8\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 1dee76b5b38e0af5d5561c9840a2a36d\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36c0ac39fc2b51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":3501,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4366), with no line terminators","md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/65/aa/19/65aa196f875385f70560b2d63ebd6df4/1779809990.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.418Z","timestamp":1788682696418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/65/aa/19/65aa196f875385f70560b2d63ebd6df4/1779809990.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 168169\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 26 May 2026 15:39:51 GMT\r\netag: \"6a15bec7-290e9\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168169,"size_decoded":168518,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"5bc1c6d113d75c1e86a2878e2ea1c07a","sha1":"47cfdd6dfcf09dd06ecf95d75347f4fc2ffb96e2","sha256":"15c04ea1a3a94efb29b9c7fe3fc8ccd4a8f0c89ccbb64064824300898fbbd070","sha512":"af966a32891130d3fc33684c128ebdb652a71b8be32ed800be6ef4e129537a4b2eb71c5868a9408f7f2ff8f912e60a2b6151fb8c4dee742225ab6e1040f32c0b","ssdeep":"3072:ZEDDFRwyD4ZKyajkZa55P7smJ2bycFwOxRVPxyAKkyrlf/605i9EuRP0LdoJ6ClN:ZEDz5DgJH+k7Jx+Z6bTRML6nVUdQ","tlshash":"2cf3237599ecf8f07c0dbff57cd11283a420a6a482fe5612215ec8c259dfa1d2c58b8e","first_seen":"2026-05-28T13:32:26.750625Z","last_seen":"2026-09-21T11:14:22.186872Z","times_seen":87,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":58,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSTYscVRR93dO6cSFKCK5CCSIKdqc-u7qSXfBjYzJqIhFcyPvseenqqkq9qu5Ob3SMH9tZiLgRqk_3zGQhQXHhVnsEEUFI7QbMbPIHBEFcSvc0TrCg7r3v3Md95x7OZ7PyhHRQ0uO3rqZTHcf0YtCxrZdu6kSkY2Ndu2E5dse-bN3USde_bE1WIR9dcjy_Y79svSH5IL3o2o5tO7Zjva5zqdLJxXUXOrvvREGn63ccp9dxAheT_P-IKbdg6BbE6IQ8Cy3qpx-p96H5Esnw21elGRRp9sprwzKmRZpjJA7fTQZJOk4wPCtV3oBKDje3kZqakK-aSJPDzRZIR4vVFmC6Js3zD8GSww1VsNH-KVsWQyZg4imMR0vIeAlNl-DpXWjxgABc4No2kuHBtTQf0zunXbrq1qT191_Q45q0Hp5DMrx_JdYT63oal4VOE4OJqqAnS-j-Elm5RDFtQo-PwIuPocXvxG5eQDLcv0rLnEKL4xdsh9phwFlbdYOoHdLIbkeM87bvC-FEVPU8n6010moJahooV79uoFRNlFkTQ3Fs0ainWNT1aSRVqITthJwGnheFfuCqLg9Q8l1osQeef3qQiZ1iMFoUeSkXZcLNzL13CvnRGjxYgX40c78pP8hiN_J7oWsHMwdZvntPeKH0GPdnFAO9ByOegClq0nj7Q4xEtS9i45rqQMSmZM4mu5vsVfO06M_oflr0ZUJA8z3kolro7La5C15szafKiHm6CpQV1ZwyUc21KAjy248LRUWvHVLG2j0ViraSofJ8wXpSuQtlirKaZRt_NX76U2Igj61IqpWePc_teVHXF91IsC53I-Z0pQiiLoyuoE1zLfBU1-S9H_5ApmvSeO5FMHoEEx-B6y3Q0gEdV6A7FabJ9zs06ffpUJpOXxc7JevoFCKtkBUtFHcakAWZxSfk3PydG1d-XLtHnuxD8t_I5gPPK2R5hVv6Z4J-vPvddlbooZ7SlZ2uF7SQT4LqB9v_gOuanH_my7WvL7kXwLOPYLL_Js1jk9VEPhrBpAQsayLWBLE8e4qyCuaxMzurZ-YT9PMWWNyaszhvLVicx1_U5E39-ZryevCq-gVGH1u28KXDIxqESgZBwALf5UoxO3SV57m9CIWpb339_K__DgCKpjTWcQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.494Z","timestamp":1788682697494,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSTYscVRR93dO6cSFKCK5CCSIKdqc-u7qSXfBjYzJqIhFcyPvseenqqkq9qu5Ob3SMH9tZiLgRqk_3zGQhQXHhVnsEEUFI7QbMbPIHBEFcSvc0TrCg7r3v3Md95x7OZ7PyhHRQ0uO3rqZTHcf0YtCxrZdu6kSkY2Ndu2E5dse-bN3USde_bE1WIR9dcjy_Y79svSH5IL3o2o5tO7Zjva5zqdLJxXUXOrvvREGn63ccp9dxAheT_P-IKbdg6BbE6IQ8Cy3qpx-p96H5Esnw21elGRRp9sprwzKmRZpjJA7fTQZJOk4wPCtV3oBKDje3kZqakK-aSJPDzRZIR4vVFmC6Js3zD8GSww1VsNH-KVsWQyZg4imMR0vIeAlNl-DpXWjxgABc4No2kuHBtTQf0zunXbrq1qT191_Q45q0Hp5DMrx_JdYT63oal4VOE4OJqqAnS-j-Elm5RDFtQo-PwIuPocXvxG5eQDLcv0rLnEKL4xdsh9phwFlbdYOoHdLIbkeM87bvC-FEVPU8n6010moJahooV79uoFRNlFkTQ3Fs0ainWNT1aSRVqITthJwGnheFfuCqLg9Q8l1osQeef3qQiZ1iMFoUeSkXZcLNzL13CvnRGjxYgX40c78pP8hiN_J7oWsHMwdZvntPeKH0GPdnFAO9ByOegClq0nj7Q4xEtS9i45rqQMSmZM4mu5vsVfO06M_oflr0ZUJA8z3kolro7La5C15szafKiHm6CpQV1ZwyUc21KAjy248LRUWvHVLG2j0ViraSofJ8wXpSuQtlirKaZRt_NX76U2Igj61IqpWePc_teVHXF91IsC53I-Z0pQiiLoyuoE1zLfBU1-S9H_5ApmvSeO5FMHoEEx-B6y3Q0gEdV6A7FabJ9zs06ffpUJpOXxc7JevoFCKtkBUtFHcakAWZxSfk3PydG1d-XLtHnuxD8t_I5gPPK2R5hVv6Z4J-vPvddlbooZ7SlZ2uF7SQT4LqB9v_gOuanH_my7WvL7kXwLOPYLL_Js1jk9VEPhrBpAQsayLWBLE8e4qyCuaxMzurZ-YT9PMWWNyaszhvLVicx1_U5E39-ZryevCq-gVGH1u28KXDIxqESgZBwALf5UoxO3SV57m9CIWpb339_K__DgCKpjTWcQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platform,Device-Stock-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1fb3b71689b1ea3ee853fe39d571e231\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.629Z","timestamp":1788682705629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252047\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-23T02:50:01.589821Z","times_seen":304782,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/8e/ff/66/8eff6635b7ed4954a8b4e92629e58a35/1698745384.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:20.905Z","timestamp":1788682700905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:49:29 GMT","end":"Thu, 29 Oct 2026 09:49:07 GMT"},"fingerprint":{"sha1":"C6:C1:39:5B:4A:88:46:B1:12:EF:0B:E1:32:AA:4B:26:BC:E9:04:3C","sha256":"97:94:F6:6E:AE:28:3E:4B:61:23:FE:FD:3B:D0:CD:67:8D:82:40:5B:11:AA:57:9E:36:73:2D:B8:75:67:B9:3C"}}},"request":{"raw":"GET /sb/au/8e/ff/66/8eff6635b7ed4954a8b4e92629e58a35/1698745384.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Oct 2023 09:43:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5PmWIpe4HlRrUd%2FAZt5f9L7O%2BRHcan4J6v1HM9kUvICESEhp4goFluio5EHO83CnKWmVBc8yvV6ZWc3rVoclHMgZI06xAc6FT%2Fkw4arMkisJ3pgIG%2Bz9OSopFipiK6Tj8A%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a36c0af4698cb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1495,"size_decoded":1314,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f070cdd03a32d5be3e06e85dc55af8db","sha1":"1220eaa18d825e82039cfaa9ef85c4ffbb50a3d9","sha256":"47522c812831fe5b4db4cd4d25c93d38c79aeb2bcb9b622dc79e61e5584818b9","sha512":"90616311e7dfc222bae39ca05a2f4df67c6420cb98910f2be8f923be01e0b144423a4c85299bdb0077aaf0fc32771b2d4c5d7ce462dd9f29ec7cb1974c198649","ssdeep":"","tlshash":"4d3106612ce9de770083a0967b313f27bd929643898a564233bc09948f9aed9cd5350b","first_seen":"2023-12-25T06:31:04Z","last_seen":"2026-09-22T18:31:49.661881Z","times_seen":1170,"resource_available":true,"data":null}},"time_used":3669,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":506,"receive":0,"ssl":3160},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.566Z","timestamp":1788682709566,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:40:44 GMT","end":"Sun, 15 Nov 2026 23:40:43 GMT"},"fingerprint":{"sha1":"04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A","sha256":"0B:F1:DB:9B:8C:77:3E:61:8B:03:C2:BF:97:81:32:72:FC:3C:87:CC:8E:6E:6B:D5:93:EF:4F:11:1C:B6:E2:06"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7829466eaae37a95454386b01d58202f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37950,"size_decoded":18372,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37943), with no line terminators","md5":"8b2235271c16f8771b21b86e1f28b646","sha1":"79076a682bb500cf7ce5a0c3b7791f444f0b4745","sha256":"2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae","sha512":"0a0a45fdba13e92501476f4744c492c70dcc537f521bf5e0ab08d58af1a1103327d809cf576eb79563a6499816136234f93a523d78ef709986808215dab780e9","ssdeep":"768:2bau76Vkz0LIRCwNvDVlW2WE2FXgi+7RB6hJgbGNqJXY1ATJSf5Rr+LPL8jvZtd6:2GMtW7Qi+7RB8JMGNqJLLFNZB","tlshash":"510329d87193b03993b718e71477a214b23a1c15300a9983e17e5c863d63e5bd23bfad","first_seen":"2026-09-03T11:38:17.004803Z","last_seen":"2026-09-23T03:04:04.362436Z","times_seen":4011,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz2skRRitnh29eBBkEU_SgoiCmXT3dPdMmz0t_jjIJupGVvBUv3pSm56uTlf1zOycsq54zkHBi9B5k2xui-JhrzoREQRh-xZw48F_QBDEgweZyWBkC-r7vqqvePVevfrssDonHVT07L0beqqyjK5HHc999ZbKhR4bd3Pb9b2Ot-HeUnkcbriTRShHb_jdsOO95r4j-a5eDzzf83zPd99WpUz1ZH3ZhSoe-EnUicOO7_c7fhRgUj65YyoHhjoQo3PyHJRonv09_RiKz5EPv35Tml2ri9ffGlYZtbrESJx8mO_mepxjeFmmpYM0P1mdhjYNIV-2oPOTlQro0dFCBZhqSOv5x2D5yYoq2Oj4gi3LIHMw8QzGozlkNoeic3B9D0o8IgAX2NxCPry_qcsxvXPRpYtuQ9p__Qk1bkj78VXkwwfXMzVxb-qsskrnBpO0hprMoQZzFNUp7LQFNT4Ft59AiV-I13oR-fD4Bq1KCiXqpXyVzkGNg2oxlYMqbaEqWhiKM5cm_ZQlcUgTmfZS4fk9TqNuN-mFUZDGPELF70KJA_ByH0W5j111ACMcGNsQ5_19jER9LDITmPq-yEzF_FUOVrlbz7QdHNJjbQcyJ6DlAUpRH6liz9wDt1dm09SImV4Eymw9o0zUMyUsQbl39rLnU68XcbaWxr3-Ws8PgjXmBXyNCp7SqB_FjNGj1NiqPixWtjvf_yGxK8_cRKZhKES_G_S7SRyKOBEs5kHC_FiKKIlhVA1lWsvHmaqGfPTwVxSqIc4Lr4DRU5jsFFxdAa180HENulNjmn-7Q_PBgA6l6QyU3alYR2kIXaOwbdg7DqQlh9k5uTr7YPv6d0tTN5o9SP4zWQ3wskZR1ritfiAYZHe_2SqsGqopXbh801IrnwZVj7b-BlcNeeqfL5bfzfWvgRf7MMV_SLPMFA2RD9-F0QSsaCNTBJm8vIqyGuZ_a3ZZH5pPMSjbYFl7xrKyfcSyMvt8Abe9xGzItd9-vCBv1JnbDwLP436QiCQKk24_lVHo93oy8rux9LoRrGluf_XST_8OAA24droIBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.408Z","timestamp":1788682696408,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz2skRRitnh29eBBkEU_SgoiCmXT3dPdMmz0t_jjIJupGVvBUv3pSm56uTlf1zOycsq54zkHBi9B5k2xui-JhrzoREQRh-xZw48F_QBDEgweZyWBkC-r7vqqvePVevfrssDonHVT07L0beqqyjK5HHc999ZbKhR4bd3Pb9b2Ot-HeUnkcbriTRShHb_jdsOO95r4j-a5eDzzf83zPd99WpUz1ZH3ZhSoe-EnUicOO7_c7fhRgUj65YyoHhjoQo3PyHJRonv09_RiKz5EPv35Tml2ri9ffGlYZtbrESJx8mO_mepxjeFmmpYM0P1mdhjYNIV-2oPOTlQro0dFCBZhqSOv5x2D5yYoq2Oj4gi3LIHMw8QzGozlkNoeic3B9D0o8IgAX2NxCPry_qcsxvXPRpYtuQ9p__Qk1bkj78VXkwwfXMzVxb-qsskrnBpO0hprMoQZzFNUp7LQFNT4Ft59AiV-I13oR-fD4Bq1KCiXqpXyVzkGNg2oxlYMqbaEqWhiKM5cm_ZQlcUgTmfZS4fk9TqNuN-mFUZDGPELF70KJA_ByH0W5j111ACMcGNsQ5_19jER9LDITmPq-yEzF_FUOVrlbz7QdHNJjbQcyJ6DlAUpRH6liz9wDt1dm09SImV4Eymw9o0zUMyUsQbl39rLnU68XcbaWxr3-Ws8PgjXmBXyNCp7SqB_FjNGj1NiqPixWtjvf_yGxK8_cRKZhKES_G_S7SRyKOBEs5kHC_FiKKIlhVA1lWsvHmaqGfPTwVxSqIc4Lr4DRU5jsFFxdAa180HENulNjmn-7Q_PBgA6l6QyU3alYR2kIXaOwbdg7DqQlh9k5uTr7YPv6d0tTN5o9SP4zWQ3wskZR1ritfiAYZHe_2SqsGqopXbh801IrnwZVj7b-BlcNeeqfL5bfzfWvgRf7MMV_SLPMFA2RD9-F0QSsaCNTBJm8vIqyGuZ_a3ZZH5pPMSjbYFl7xrKyfcSyMvt8Abe9xGzItd9-vCBv1JnbDwLP436QiCQKk24_lVHo93oy8rux9LoRrGluf_XST_8OAA24droIBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f12ed628f87fe23f6daa8c15b2a23e87\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.628Z","timestamp":1788682705628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252047\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-23T02:50:01.589821Z","times_seen":304782,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9yeT7QFwIMooLkQjSqJh0_Sfl7AZ_NjPd6oyM4ELeX6XfpFJVU-9VkslG21HXvVAQQaicpLtnIYPiwq2ddicIU-CiwemN4FoQxIULSTpMiwV1733nPu4793A-mRanpI2CnrxxNZ2oOKabfttqPn9DJSId6ebW9aZtta1LzRsqCbxLzfEy5MOXbddrWy80X5e8n246lm1ZtmU3X1O5jNLx5qoLld2zQ78deG3b7rZt38E4_y-iiwY0bUAMT8njUKJ67NfoXSi-QDL4-hWp-ybNXnp1UMTUpDmG4vDtpJ-kowSD8zLKa4iSw_VtpLoi5PM60uRwvQXS4Xy5BZiqSP3JB2DJ4Zoq2HD_jC2LIRMw8ShGwwVkvICiC_D0DpS4TwAusLWNZHCwleYjevusS5fdijT-_ANqVJHGg4tIBvcux2rcvJbGhVFpojGOSqjxAqq3QFYsYCZ1qNExuPkQSvxErPozSAb7V2mRUyhx8pxlU6vjc9aKAj9sdWhotULGecvzhLBDGnVdj600UtECVNdQLH9VQxHVUWR1DMRJk4bdiIWBR0MZdSJh2R1OfdcNO57vRAH3UfBdKLEHnn98kIkd0x_OTV7IeZFwPXXvnkFeuAIPlqAXTt2vivey2Am9bsex_KmNLN-9K9yOdBn3phR9tQctHoE2Fam9qTEU5b6ItaPLAxHrgtnr7KyzW85S05vS_dT0ZEJA8z3kopyr7Ja-A24uzCaRFrN0GSgz5YwyUc6UMAT5rYdC8ZZDebfViQLaopSzVpc7kvuOdIOOPY-0KcpptvZX7eh3ib48aYYyWurZdZ2uGwaeCELBAu6EzA6k8MMAWpVQur4SeKIq8s53vyBTFak9tQFGj6HjY3B1AbSwQUcl6E6JSfLtDk16PTqQut1TZqdgbZVCpCUy04C5XYM0ZBqfkouzt65f_n7lnivd3yD5j2T9geclsrzETfUDQS_e_WY7M2qgJnRpp2uGGvl_UHV_-y9wVZH__f3Zytcvvn8Enn0AnT2cNIt1VpENZNApAcvqiBVBLM-foqyE_teZnddT_RF6eQMsbsxYnDfmLM7jTyuycfTFivJqcEWuPPE0tDppWsKTNg-p34mk7_vM9xweRczqOJHrOt0QRlc3v3z2538GAJdko5BxBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.766Z","timestamp":1788682709766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9yeT7QFwIMooLkQjSqJh0_Sfl7AZ_NjPd6oyM4ELeX6XfpFJVU-9VkslG21HXvVAQQaicpLtnIYPiwq2ddicIU-CiwemN4FoQxIULSTpMiwV1733nPu4793A-mRanpI2CnrxxNZ2oOKabfttqPn9DJSId6ebW9aZtta1LzRsqCbxLzfEy5MOXbddrWy80X5e8n246lm1ZtmU3X1O5jNLx5qoLld2zQ78deG3b7rZt38E4_y-iiwY0bUAMT8njUKJ67NfoXSi-QDL4-hWp-ybNXnp1UMTUpDmG4vDtpJ-kowSD8zLKa4iSw_VtpLoi5PM60uRwvQXS4Xy5BZiqSP3JB2DJ4Zoq2HD_jC2LIRMw8ShGwwVkvICiC_D0DpS4TwAusLWNZHCwleYjevusS5fdijT-_ANqVJHGg4tIBvcux2rcvJbGhVFpojGOSqjxAqq3QFYsYCZ1qNExuPkQSvxErPozSAb7V2mRUyhx8pxlU6vjc9aKAj9sdWhotULGecvzhLBDGnVdj600UtECVNdQLH9VQxHVUWR1DMRJk4bdiIWBR0MZdSJh2R1OfdcNO57vRAH3UfBdKLEHnn98kIkd0x_OTV7IeZFwPXXvnkFeuAIPlqAXTt2vivey2Am9bsex_KmNLN-9K9yOdBn3phR9tQctHoE2Fam9qTEU5b6ItaPLAxHrgtnr7KyzW85S05vS_dT0ZEJA8z3kopyr7Ja-A24uzCaRFrN0GSgz5YwyUc6UMAT5rYdC8ZZDebfViQLaopSzVpc7kvuOdIOOPY-0KcpptvZX7eh3ib48aYYyWurZdZ2uGwaeCELBAu6EzA6k8MMAWpVQur4SeKIq8s53vyBTFak9tQFGj6HjY3B1AbSwQUcl6E6JSfLtDk16PTqQut1TZqdgbZVCpCUy04C5XYM0ZBqfkouzt65f_n7lnivd3yD5j2T9geclsrzETfUDQS_e_WY7M2qgJnRpp2uGGvl_UHV_-y9wVZH__f3Zytcvvn8Enn0AnT2cNIt1VpENZNApAcvqiBVBLM-foqyE_teZnddT_RF6eQMsbsxYnDfmLM7jTyuycfTFivJqcEWuPPE0tDppWsKTNg-p34mk7_vM9xweRczqOJHrOt0QRlc3v3z2538GAJdko5BxBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 585df37828e6c33f92a0e3b808b0668f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.618Z","timestamp":1788682705618,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 218\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":218,"data":"[{\"placement_key\":\"8888a19c6a1141f12aba002c4984b9b9\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cc-051b-7043-88a1-a72e34f5c1e0\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1568,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/62/40/9f/62409fe1ef0bff66b8db616a3208712f/1708077675.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.756Z","timestamp":1788682709756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/62/40/9f/62409fe1ef0bff66b8db616a3208712f/1708077675.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31832\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 16 Feb 2024 10:01:23 GMT\r\netag: \"65cf3273-7c58\"\r\nexpires: Tue, 08 Sep 2026 08:18:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31832,"size_decoded":32180,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"36eb1abbf97a0c5f794cc2de05136a90","sha1":"a8a7023172d22c881a14db7bf034b5c2d1bc2aab","sha256":"8cd29b002d09951e3655632e8459cfaa63d9b5005e1df4e93e1ec8fb945bb727","sha512":"c6ee9333aea0960017480773a2654059fc3838ba573713669b031147de7c2eb1bb6f1a45d0e2d80cb1d49d0599fec2a5ae4073cb6073d2fb779aa9dc801f1608","ssdeep":"768:YrSk5vagWgzhg/z2hD15HSkJsKUK4e3sq0Rs2/p:YLagJyWD15HSkJJSqW/p","tlshash":"d7e2e1fa7ea12ce2b4797cdb12b41ce6a2d1e14b18b452c811ce9090fa9769d6111fc6","first_seen":"2024-03-31T00:57:53Z","last_seen":"2026-09-21T11:13:40.319408Z","times_seen":177,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/9ef44dd83283964d69db6c29b16ed596/invoke.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:15.424Z","timestamp":1788682695424,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"levitydinerdowny.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 00:38:22 GMT","end":"Fri, 06 Nov 2026 00:38:21 GMT"},"fingerprint":{"sha1":"8F:C8:EC:66:A9:2C:C4:C9:BC:54:1A:99:9D:0E:65:9D:CB:CE:5A:E9","sha256":"E1:54:D3:ED:AE:BB:39:C4:9D:8C:81:DD:F8:62:A6:1D:A4:48:E2:3C:A4:D2:ED:09:DB:A4:3A:7B:9C:5F:9C:3D"}}},"request":{"raw":"GET /9ef44dd83283964d69db6c29b16ed596/invoke.js HTTP/1.1\r\nHost: levitydinerdowny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:15 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_8f26c41cec9b382d7b940db003223fde=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:15 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: levitydinerdowny.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 45b57a01e646c15b9fd3417e0c42a176\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_8f26c41cec9b382d7b940db003223fde","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:15Z","raw_expires":"Mon, 07 Sep 2026 08:18:15 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_8f26c41cec9b382d7b940db003223fde=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:15 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46043,"size_decoded":19017,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46041), with no line terminators","md5":"4a578a69b8072fb9ed350f86949c77b4","sha1":"ba342215633379025442adf1e3f8dd232a0294c2","sha256":"7689eb1da30423ee75ac6ea8ed46ea7faaf9910d1f1a3a0e543a383283f66b74","sha512":"0e4515ef16991c8077dd4d7c1cb5a1e179e2cb5f4be449ee1388b98f632182a5e375bc07d1302c181df76413e9498a2734e38fa15ee5732d5573ca007663663e","ssdeep":"768:g8arXCBsHNZfc8f2L9mxW64tUVJSt2PatHX6NMB/XL0SdJzzuCPlrBzkYrJEOlh4:WNfQ9mxW6YSJSt1sMuIplPU9/IgoDynX","tlshash":"ee23f9e36b11e72c42e064f32a2a9935f01add46b4cc97d8f17cbc486f9e7178a78524","first_seen":"2026-09-06T08:18:49.299143Z","last_seen":"2026-09-07T01:02:37.240419Z","times_seen":2,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":0,"dns":54,"connect":107,"send":0,"wait":114,"receive":107,"ssl":328},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"levitydinerdowny.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/35/f6/b0/35f6b0fc0bb60b9e124479d167ad467d/1673517618.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.391Z","timestamp":1788682696391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/35/f6/b0/35f6b0fc0bb60b9e124479d167ad467d/1673517618.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12063\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 12 Jan 2023 10:00:26 GMT\r\netag: \"63bfda3a-2f1f\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12063,"size_decoded":12411,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3","md5":"1d069a42ab310d5589fbddc496c3310b","sha1":"bf812df75cadec473e93ac740a7c92d88a1434e0","sha256":"3135ae51c5583d22aaadfc24aa25ee9361a3c0b74d8a707e4a4a5777b202b43b","sha512":"893794b640fffdb1b3595d483644a1d785dee362efa947c16012f5688811f32a799c01a630f2076dd77a326bf29bcfdc7f2b674e79d022d413a872996359b1b5","ssdeep":"192:tSRgZ/0LKfslbx4zHbE+lQXmdfb16dHPRkmTixkkIYp48WA0OMas8mqscBiM59:tdJmxx4zw+OX4fbyvRtTixbv5vs8mYrj","tlshash":"1c42bf9503f614c4bcd9476b34672d5152e896d359ac32070fc3aae7b3fb29198d1f90","first_seen":"2023-05-03T23:03:13Z","last_seen":"2026-09-21T03:53:01.580396Z","times_seen":193,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcCfdPd0901lPwR8Hza4mKxG8WD-6Zivb09XbVT0zmdPGiEdZ0IMXoffNbvYWFA-56qyIIAjp24JZD_4DgiAeZSaDKxbU931Vr6h6r9736UF1Rjqo6Om71_RUZRm9HHU89-WbKhd6bNyNLdf3Ot66e1PlcbjuThahHF3xu2HHe8V9K-U7-nLg-Z7ne777pipTqSeXlyhUcd9Pok4cdny_3_GjAJPy_zumcmCoAzE6I89Aiebp3-WHUHyOfPj166nZsbp49Y1hlVGrS4zE8fv5Tq7HOYbnpSwdyPx4dRraNIR82YLOj1cqoEeHCxVgqiGtS4_A8uMVVbDR0WO2LEOag4mnMB7NkWZzKDoH13ehxEMCcIGNTeTDexu6HNPbj1G6QBvS_utPqHFD2o8uIh_ev5qpiXtDZ5VVOjeYyBpqMocazFFUJ7DTFtT4BNx-DCV-IV7reeTDo2u0KimUqJfylZyDGgfVYioHlWyhKloYilOXJn3JkjikSSp7Unh-j9Oo2016YRTImEeo-B0osQ9e7qEo97Cj9mGEA2Mb4ry3h5Goj0RmAlPfE5mpmL_KwSp365m2gwN6pO0gzQlouY9S1Ieq2DV3we2F2VQaMdOLQJmtZ5SJeqaEJSh3T1_0fOr1Is7WZNzrr_X8IFhjXsDXqOCSRv0oZoweSmOr-qBY2e58_0eKnfTUTVIZhkL0u0G_m8ShiBPBYh4kzI9TESUxjKqhTGv5OVPVkA8e_IpCNcR59iUwegKTnYCrC6CVDzquQbdrTPNvt2k-GNBhajoDZbcr1lEaQtcobBv2toPUkoPsjFycXd-6-t3S1PTB20j5z2Q1wMsaRVnjlvqBYJDd-WazsGqopnTh8g1LbfoEqHq4-Te4asilJz9bttuV566DF3swxb83zTJTNOSdjz6H0QSsaCFTBFl6_hRlNcx_1uy8PjCfYFC2wbL2jGVl-5BlZfbFgu3WknJDXvvtx4asN7sw6tT1RJj6PKFRT6ZRFLEoDLiUzOsFstsN-gmsaW599cJP_wwAsUSS1AgEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.402Z","timestamp":1788682696402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcCfdPd0901lPwR8Hza4mKxG8WD-6Zivb09XbVT0zmdPGiEdZ0IMXoffNbvYWFA-56qyIIAjp24JZD_4DgiAeZSaDKxbU931Vr6h6r9736UF1Rjqo6Om71_RUZRm9HHU89-WbKhd6bNyNLdf3Ot66e1PlcbjuThahHF3xu2HHe8V9K-U7-nLg-Z7ne777pipTqSeXlyhUcd9Pok4cdny_3_GjAJPy_zumcmCoAzE6I89Aiebp3-WHUHyOfPj166nZsbp49Y1hlVGrS4zE8fv5Tq7HOYbnpSwdyPx4dRraNIR82YLOj1cqoEeHCxVgqiGtS4_A8uMVVbDR0WO2LEOag4mnMB7NkWZzKDoH13ehxEMCcIGNTeTDexu6HNPbj1G6QBvS_utPqHFD2o8uIh_ev5qpiXtDZ5VVOjeYyBpqMocazFFUJ7DTFtT4BNx-DCV-IV7reeTDo2u0KimUqJfylZyDGgfVYioHlWyhKloYilOXJn3JkjikSSp7Unh-j9Oo2016YRTImEeo-B0osQ9e7qEo97Cj9mGEA2Mb4ry3h5Goj0RmAlPfE5mpmL_KwSp365m2gwN6pO0gzQlouY9S1Ieq2DV3we2F2VQaMdOLQJmtZ5SJeqaEJSh3T1_0fOr1Is7WZNzrr_X8IFhjXsDXqOCSRv0oZoweSmOr-qBY2e58_0eKnfTUTVIZhkL0u0G_m8ShiBPBYh4kzI9TESUxjKqhTGv5OVPVkA8e_IpCNcR59iUwegKTnYCrC6CVDzquQbdrTPNvt2k-GNBhajoDZbcr1lEaQtcobBv2toPUkoPsjFycXd-6-t3S1PTB20j5z2Q1wMsaRVnjlvqBYJDd-WazsGqopnTh8g1LbfoEqHq4-Te4asilJz9bttuV566DF3swxb83zTJTNOSdjz6H0QSsaCFTBFl6_hRlNcx_1uy8PjCfYFC2wbL2jGVl-5BlZfbFgu3WknJDXvvtx4asN7sw6tT1RJj6PKFRT6ZRFLEoDLiUzOsFstsN-gmsaW599cJP_wwAsUSS1AgEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 36b6659bda65071b40aec291250f895c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1ySTYgcxRvGq2f3lsMf_oTgxdiCiIIz29Xf7R4CwY_TbowbySEHqe6qnlSmp7vT1T0zGRASY7yIsN48GOx5ZnZXRIKChz2pzHoQVgT7IMwhC-LRiyB48iCzOxiwDu9bPE9BPe_L7_1JdUI6qNjija1sLJOEbTgdQ3_hukx5NlT69jWdGh1jU78uU9fe1EfLUgxeppbdMV7UXxdRL9swDWoY1KD6a7IQcTbaOHUh80c0cDqu3aHU71DHxKj4r6KqFhTTwAcn5P-QvPnfb_ENyGiOtP_lK0L1yix_6dV-lbAyKzDgB2-lvTQbpug_ucaFhjg9WL1GphpCPm4hSw9WUyAbzJZTIJQNaV14jDA9WEVFONg7SxsmEClCfg7DwRwimUOyOaLsPiT_mQARx_YVpP397awYsjtnLlu6DVn_60_IYUPWH59H2n90OZEjfSdLqlJmqcIoriFHc8juHHl1hHLcghweISrfheQ_EaN1EWl_b4tVBYPki-cMygzPicJ27DpB23ODuM0sbra573AjdExLuMbpjmQ8B1MtVEpDJTVUcQtV3kKfL3QW-HEYuDYLROzF3KBexBzLCjzbMWM3clBF9yD5LqLiwRfV23liBrbvmYY3ofs5v1n2BrOyqMSsSiM1oZ-dSaZ1Ku4vRdOaUOTFXfTkLhRfgyobol19BwNe7_FEmare54mqQrrq5qpb9TQruxO2l5VdkRKwYhcFr2cyv63uIyrXpuNY8Wm2LCws6ykLeT2VvCQobv-7nahteA5te65ltkPb8tqu79oRjVlsBs4sVmVVT_IVVNpih6AnFrrv-z6jQeQySm0aU5OFzDDMyA58OwzCAErWkIqAKQ1j2ZAbvz5ELhuiPfU8QnYElRwhkmtg1dNgwxrsZo1xetgXfaGyKuVqnKWik7OuUB0uBuBZjbxcR3lHgyjJJDkh56dvXrv83Sk33U8yiOj40t-ffjP44esAUVEjL2rckt8TdJN7X13JS9mXY7YEaadkpVgHkw0598EziGRDLnyenjK92d5ClN-Fyo8vnRxe_f3BxcNpovKGiA9_gcoIwlxDIgkScUxWByysocSTz0Nx_O0fZ95EvYduoSFMtGmYFNosTIrko7O8Si503zQNI6JmwAPHDiw_Fo5NPU841HKFYTkoVXPr4bM__jMAQapjTl4EAAA=","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.621Z","timestamp":1788682705621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1ySTYgcxRvGq2f3lsMf_oTgxdiCiIIz29Xf7R4CwY_TbowbySEHqe6qnlSmp7vT1T0zGRASY7yIsN48GOx5ZnZXRIKChz2pzHoQVgT7IMwhC-LRiyB48iCzOxiwDu9bPE9BPe_L7_1JdUI6qNjija1sLJOEbTgdQ3_hukx5NlT69jWdGh1jU78uU9fe1EfLUgxeppbdMV7UXxdRL9swDWoY1KD6a7IQcTbaOHUh80c0cDqu3aHU71DHxKj4r6KqFhTTwAcn5P-QvPnfb_ENyGiOtP_lK0L1yix_6dV-lbAyKzDgB2-lvTQbpug_ucaFhjg9WL1GphpCPm4hSw9WUyAbzJZTIJQNaV14jDA9WEVFONg7SxsmEClCfg7DwRwimUOyOaLsPiT_mQARx_YVpP397awYsjtnLlu6DVn_60_IYUPWH59H2n90OZEjfSdLqlJmqcIoriFHc8juHHl1hHLcghweISrfheQ_EaN1EWl_b4tVBYPki-cMygzPicJ27DpB23ODuM0sbra573AjdExLuMbpjmQ8B1MtVEpDJTVUcQtV3kKfL3QW-HEYuDYLROzF3KBexBzLCjzbMWM3clBF9yD5LqLiwRfV23liBrbvmYY3ofs5v1n2BrOyqMSsSiM1oZ-dSaZ1Ku4vRdOaUOTFXfTkLhRfgyobol19BwNe7_FEmare54mqQrrq5qpb9TQruxO2l5VdkRKwYhcFr2cyv63uIyrXpuNY8Wm2LCws6ykLeT2VvCQobv-7nahteA5te65ltkPb8tqu79oRjVlsBs4sVmVVT_IVVNpih6AnFrrv-z6jQeQySm0aU5OFzDDMyA58OwzCAErWkIqAKQ1j2ZAbvz5ELhuiPfU8QnYElRwhkmtg1dNgwxrsZo1xetgXfaGyKuVqnKWik7OuUB0uBuBZjbxcR3lHgyjJJDkh56dvXrv83Sk33U8yiOj40t-ffjP44esAUVEjL2rckt8TdJN7X13JS9mXY7YEaadkpVgHkw0598EziGRDLnyenjK92d5ClN-Fyo8vnRxe_f3BxcNpovKGiA9_gcoIwlxDIgkScUxWByysocSTz0Nx_O0fZ95EvYduoSFMtGmYFNosTIrko7O8Si503zQNI6JmwAPHDiw_Fo5NPU841HKFYTkoVXPr4bM__jMAQapjTl4EAAA= HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:25 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: close\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_a+3d66001ddbe5593186bdc7fa3ebc0e94=756511; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None\niprc_a-756511=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None\niprc_l+28ca8fd9acacab7dc9542c4e3b2e715e=6790255; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None\niprc_l-6790255=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 7\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 477388f308079bedb0456c38d30bd8b2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_a+3d66001ddbe5593186bdc7fa3ebc0e94","value":"756511","quoted":false,"path":"/","expires":"2026-09-07T08:18:25Z","raw_expires":"Mon, 07 Sep 2026 08:18:25 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_a+3d66001ddbe5593186bdc7fa3ebc0e94=756511; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None"},{"name":"iprc_a-756511","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:25Z","raw_expires":"Mon, 07 Sep 2026 08:18:25 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_a-756511=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None"},{"name":"iprc_l+28ca8fd9acacab7dc9542c4e3b2e715e","value":"6790255","quoted":false,"path":"/","expires":"2026-09-07T08:18:25Z","raw_expires":"Mon, 07 Sep 2026 08:18:25 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l+28ca8fd9acacab7dc9542c4e3b2e715e=6790255; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None"},{"name":"iprc_l-6790255","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:25Z","raw_expires":"Mon, 07 Sep 2026 08:18:25 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_l-6790255=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:25 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMggoKs4kEkgiwqJtP_Sbu3xZ_L7oy6Kyt4kPrrTE063b1d1Uk2J8dVb8IcPIggdL5kZlaQRRH06ma8CcI2iAy4cxE8C4J4lGTCjlhQ7736XlH1vY_v42lxQtoo6PEbV9KJimO64bet5vPXVSLSkW5uXmvaVtu62LyuksC72BwvQz582Xa9tvVC83XJ--mGY9mWZVt28zWVyygdb6y6UNkdO_Tbgde27W7b9h2M8_8jumhA0wbE8IQ8DiWqx36P3oXiCySDr1-Rum_S7KVXB0VMTZpjKA7fTvpJOkowOCujvIYoOVzfRqorQj6rI00O11MgHc6XU4CpitSfvA-WHK6pgg33T9myGDIBE49gNFxAxgsougBPb0GJewTgAptbSAYHm2k-ojdPu3TZrUjj77-gRhVp3D-PZHDnUqzGzatpXBiVJhrjqIQaL6B6C2TFAmZShxodgZsPoMTPxKo_g2Swf4UWOYUSx89ZNrU6PmetKPDDVoeGVitknLc8Twg7pFHX9dhKIxUtQHUNxXKrGoqojiKrYyCOmzTsRiwMPBrKqBMJy-5w6rtu2PF8Jwq4j4LvQok98Pyjg0xsm_5wbvJCzouE66l7-xTywhV4sAS9cOp-VbyXxU7odTuO5U9tZPnubeF2pMu4N6Xoqz1o8TC0qUjtTY2hKPdFrB1dHohYF8xeZ2ed3XKWmt6U7qemJxMCmu8hF-VcZTf0LXBzbjaJtJily0CZKWeUiXKmhCHIbzwQirccyrutThTQFqWctbrckdx3pBt07HmkTVFOs7W_anf_lOjL42Yoo6WeXdfpumHgiSAULOBOyOxACj8MoFUJpesrgSeqIu98_xsyVZHaUxfA6BF0fASuzoEWNuioBN0uMUm-3aZJr0cHUrd7ymwXrK1SiLREZhowN2uQhkzjE3J-9ta1Sz-s3HP5iach-U9kvcDzElleYkf9SNCLd7_ZyowaqAld2umqoUY-BKrubf0Driry6K_frXz94s4n4Nn70NmDl2axzioiT76ETglY1kCsCGJ59hVlJfR_zuysnuoP0csbYHFjxuK8MWdxHn9akQt3P6_I5e4fFbmA7JS8VsdNS3jS5iH1O5H0fZ_5nsOjiFkdJ3JdpxvC6Grni2d_-XcAcHSrtXEEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.768Z","timestamp":1788682709768,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMggoKs4kEkgiwqJtP_Sbu3xZ_L7oy6Kyt4kPrrTE063b1d1Uk2J8dVb8IcPIggdL5kZlaQRRH06ma8CcI2iAy4cxE8C4J4lGTCjlhQ7736XlH1vY_v42lxQtoo6PEbV9KJimO64bet5vPXVSLSkW5uXmvaVtu62LyuksC72BwvQz582Xa9tvVC83XJ--mGY9mWZVt28zWVyygdb6y6UNkdO_Tbgde27W7b9h2M8_8jumhA0wbE8IQ8DiWqx36P3oXiCySDr1-Rum_S7KVXB0VMTZpjKA7fTvpJOkowOCujvIYoOVzfRqorQj6rI00O11MgHc6XU4CpitSfvA-WHK6pgg33T9myGDIBE49gNFxAxgsougBPb0GJewTgAptbSAYHm2k-ojdPu3TZrUjj77-gRhVp3D-PZHDnUqzGzatpXBiVJhrjqIQaL6B6C2TFAmZShxodgZsPoMTPxKo_g2Swf4UWOYUSx89ZNrU6PmetKPDDVoeGVitknLc8Twg7pFHX9dhKIxUtQHUNxXKrGoqojiKrYyCOmzTsRiwMPBrKqBMJy-5w6rtu2PF8Jwq4j4LvQok98Pyjg0xsm_5wbvJCzouE66l7-xTywhV4sAS9cOp-VbyXxU7odTuO5U9tZPnubeF2pMu4N6Xoqz1o8TC0qUjtTY2hKPdFrB1dHohYF8xeZ2ed3XKWmt6U7qemJxMCmu8hF-VcZTf0LXBzbjaJtJily0CZKWeUiXKmhCHIbzwQirccyrutThTQFqWctbrckdx3pBt07HmkTVFOs7W_anf_lOjL42Yoo6WeXdfpumHgiSAULOBOyOxACj8MoFUJpesrgSeqIu98_xsyVZHaUxfA6BF0fASuzoEWNuioBN0uMUm-3aZJr0cHUrd7ymwXrK1SiLREZhowN2uQhkzjE3J-9ta1Sz-s3HP5iach-U9kvcDzElleYkf9SNCLd7_ZyowaqAld2umqoUY-BKrubf0Driry6K_frXz94s4n4Nn70NmDl2axzioiT76ETglY1kCsCGJ59hVlJfR_zuysnuoP0csbYHFjxuK8MWdxHn9akQt3P6_I5e4fFbmA7JS8VsdNS3jS5iH1O5H0fZ_5nsOjiFkdJ3JdpxvC6Grni2d_-XcAcHSrtXEEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Device-Stock-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6d892fdd4fdf3c489fc1e3c9c87f7646\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fstyle.css\u0026l=5327\u0026fd=482","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.098Z","timestamp":1788682705098,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fcss%2Fstyle.css\u0026l=5327\u0026fd=482 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Mobile, X-Device-User-Agent, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":108,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSzYscRRSvmR29eBAlBE8ygoiCM-nP6e7kIsGPi8mqiUTwIPXVs5Xp6e50Vc9M5qJr_LjuQcSL0POb2d0cJCgevOqsICII6duC2Uv-AUEQjzKzgxssqPdevfd49Xs_fp_NyhPSRUmP37qSTVWS0At-12q_eEOlIhvr9tXrbdvqWpfaN1Ta8y61JytTjC7arte1Xmq_Ifkgu-BYtmXZlt1-XRUyziYX1lWo_J4d-d2e17XtsGv7DibF_zO63IKmWxCjE_I0lKiffBi_D8WXSIffvir1wGT5y68Ny4SarMBIHL6bDtJsnGJ4FsZFA3F6uOlGpmtCvmoiSw83WyAbLVZbgKmaNM8_AEsPN1DBRvunaFkCmYKJJzAeLSGTJRRdgmd3oMR9AnCBq9tIhwdXs2JMb59W6apak9bff0GNa9J6cA7p8N7lRE3a17KkNCpLNSZxBTVZQvWXyMslzLQJNT4CNx9Did-J1XwW6XD_Ci0LCiWOn7dsagU-Z52450edgEZWJ2KcdzxPCDuiceh6bM2RipeguoFydVUDZdxEmTcxFMdtGoUxi3oejWQcxMKyA059140Cz3fiHvdR8l0osQdefHpQplx70cz5pvwgT5zICwPH8mf2QS52zGC0MEUpF6uemXP3NOVF6yTyYveucAPpMu7NKAZqD1o8Bm1q0nj7Q4xEtS8S7ejqQCS6ZPbGOxvvVvPM9Gd0PzN9mRLQYg-FqBYqv6XvgJut-TTWYp6tDGWmmlMmqrkShqC49ShRVISdgDLWCeNAdGIZxK4nWChjZxFrU1azfKOvxk9_SgzkcTuS8YrP0HVCN-p5ohcJ1uNOxOyeFH7Ug1YVlG6uCZ6qmrz3wx_IVU0az7wARo-gkyNwtQVa2qDjCnSnwjT9foem_T4dSt3tK7NTsq7KILIKuWnB3G5AGjJLTsi5-TvXL_-4Vo88-QWS_0Y2B7yokBcVbqqfCfrJ7nfbuVFDNaUrOV0z1MjHQdX97X_AVU3OP_XlWtcXnVfA84-g8_8mzROdr8bvQ2cELG8hUQSJPPuKsgr6kTc7i2f6E_SLFljSmrOkaC1YUiRf1ORN9fl6Zk3kw9EpeK2O26HjWBa3nUhEvhe5YSx9zw4C6dtuT1quD6Prm18_9-u_AwC5C7aacQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.502Z","timestamp":1788682697502,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSzYscRRSvmR29eBAlBE8ygoiCM-nP6e7kIsGPi8mqiUTwIPXVs5Xp6e50Vc9M5qJr_LjuQcSL0POb2d0cJCgevOqsICII6duC2Uv-AUEQjzKzgxssqPdevfd49Xs_fp_NyhPSRUmP37qSTVWS0At-12q_eEOlIhvr9tXrbdvqWpfaN1Ta8y61JytTjC7arte1Xmq_Ifkgu-BYtmXZlt1-XRUyziYX1lWo_J4d-d2e17XtsGv7DibF_zO63IKmWxCjE_I0lKiffBi_D8WXSIffvir1wGT5y68Ny4SarMBIHL6bDtJsnGJ4FsZFA3F6uOlGpmtCvmoiSw83WyAbLVZbgKmaNM8_AEsPN1DBRvunaFkCmYKJJzAeLSGTJRRdgmd3oMR9AnCBq9tIhwdXs2JMb59W6apak9bff0GNa9J6cA7p8N7lRE3a17KkNCpLNSZxBTVZQvWXyMslzLQJNT4CNx9Did-J1XwW6XD_Ci0LCiWOn7dsagU-Z52450edgEZWJ2KcdzxPCDuiceh6bM2RipeguoFydVUDZdxEmTcxFMdtGoUxi3oejWQcxMKyA059140Cz3fiHvdR8l0osQdefHpQplx70cz5pvwgT5zICwPH8mf2QS52zGC0MEUpF6uemXP3NOVF6yTyYveucAPpMu7NKAZqD1o8Bm1q0nj7Q4xEtS8S7ejqQCS6ZPbGOxvvVvPM9Gd0PzN9mRLQYg-FqBYqv6XvgJut-TTWYp6tDGWmmlMmqrkShqC49ShRVISdgDLWCeNAdGIZxK4nWChjZxFrU1azfKOvxk9_SgzkcTuS8YrP0HVCN-p5ohcJ1uNOxOyeFH7Ug1YVlG6uCZ6qmrz3wx_IVU0az7wARo-gkyNwtQVa2qDjCnSnwjT9foem_T4dSt3tK7NTsq7KILIKuWnB3G5AGjJLTsi5-TvXL_-4Vo88-QWS_0Y2B7yokBcVbqqfCfrJ7nfbuVFDNaUrOV0z1MjHQdX97X_AVU3OP_XlWtcXnVfA84-g8_8mzROdr8bvQ2cELG8hUQSJPPuKsgr6kTc7i2f6E_SLFljSmrOkaC1YUiRf1ORN9fl6Zk3kw9EpeK2O26HjWBa3nUhEvhe5YSx9zw4C6dtuT1quD6Prm18_9-u_AwC5C7aacQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 8\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6fcfa71e57613a96277767f45e3184ea\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRuungzfd_AghBAERVqQoODOdvd090wnt-CPU3bVrETwVNVVPVvZmq5OV_XMZE67iXjwtAcPXoTeZ3azt6Ao5KqzHgRBSN8GzF78BwRBPMpMBlcsqPd9q97iqeeppz47qs5JBxVdvH9LT6VSdDPqeO4bd2TO9di4Wzuu73W8G-4dmcfhDXeyDOXout8NO96b7nsi3dObged7nu_57ruyFJmebK66kMVjP4k6cdjx_X7HjwJMyv_umMqBoQ746JxchuTNi79ln0Cmc-TDr98WZs_q4q13hpWiVpcY8dOP8r1cj3MML8qsdJDlp-vT0KYh5MsWdH66VgE9Ol6qAJMNaV19BpafrqmCjU6es2UKIgfjL2A8mkOoOSSdI9UPIflTAqQcW9vIh4-2dDmm95936bLbkPaff0COG9J-dgX58PFNJSfuba0qK3VuMMlqyMkccjBHUZ3BTluQ4zOk9gEk_4V4rVeRD09u0aqkkLxeyZfZHNQ4qJZTOqiyFqqihSFfuDTpZyyJQ5qIrJdxz--lNOp2k14YBVmcRqjSA0h-iLTcR1HuY08ewnAHxjbE-WAfI16fcGUCUz_iylTMX-dgnbv1TNvBET3RdiByAloeouT1sSzumYdI7aXZNDN8ppeBMlvPKOP1THJLUN5bvO751OtFKdvI4ija6PmBt8Gol27EXq8XsozyIIyOM2Or-qhY2-788LvAnli4icjCkPN-N-h3kzjkccJZnAYJ82PBoySGkTWkaa0eZyob8vGTX1HIhjgvXQOjZzDqDKm8BFr5oOMadLfGNP92l-aDAR0K0xlIu1uxjtTgukZh27D3HQhLjtQ5uTL7cOfm9ytTxZOXIdKfyXogLWsUZY278keCgTr4ZruwciindOnybUut-B-ofLr9F1LZkKv_f7D6btdf8ZAW-zDFP0gzZYqGXPvuAEYTsMKBkgRKXFxFWQ3zrzW7qI_MpxiUbTDVnjFVto-ZKtUXK7ZLzM9XwA3JLu_AyIXbDwLPS_0g4UkUJt1-JqLQ7_VE5Hdj4XUjWNPc_eq1n_4eALLRU64IBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.367Z","timestamp":1788682696367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRuungzfd_AghBAERVqQoODOdvd090wnt-CPU3bVrETwVNVVPVvZmq5OV_XMZE67iXjwtAcPXoTeZ3azt6Ao5KqzHgRBSN8GzF78BwRBPMpMBlcsqPd9q97iqeeppz47qs5JBxVdvH9LT6VSdDPqeO4bd2TO9di4Wzuu73W8G-4dmcfhDXeyDOXout8NO96b7nsi3dObged7nu_57ruyFJmebK66kMVjP4k6cdjx_X7HjwJMyv_umMqBoQ746JxchuTNi79ln0Cmc-TDr98WZs_q4q13hpWiVpcY8dOP8r1cj3MML8qsdJDlp-vT0KYh5MsWdH66VgE9Ol6qAJMNaV19BpafrqmCjU6es2UKIgfjL2A8mkOoOSSdI9UPIflTAqQcW9vIh4-2dDmm95936bLbkPaff0COG9J-dgX58PFNJSfuba0qK3VuMMlqyMkccjBHUZ3BTluQ4zOk9gEk_4V4rVeRD09u0aqkkLxeyZfZHNQ4qJZTOqiyFqqihSFfuDTpZyyJQ5qIrJdxz--lNOp2k14YBVmcRqjSA0h-iLTcR1HuY08ewnAHxjbE-WAfI16fcGUCUz_iylTMX-dgnbv1TNvBET3RdiByAloeouT1sSzumYdI7aXZNDN8ppeBMlvPKOP1THJLUN5bvO751OtFKdvI4ija6PmBt8Gol27EXq8XsozyIIyOM2Or-qhY2-788LvAnli4icjCkPN-N-h3kzjkccJZnAYJ82PBoySGkTWkaa0eZyob8vGTX1HIhjgvXQOjZzDqDKm8BFr5oOMadLfGNP92l-aDAR0K0xlIu1uxjtTgukZh27D3HQhLjtQ5uTL7cOfm9ytTxZOXIdKfyXogLWsUZY278keCgTr4ZruwciindOnybUut-B-ofLr9F1LZkKv_f7D6btdf8ZAW-zDFP0gzZYqGXPvuAEYTsMKBkgRKXFxFWQ3zrzW7qI_MpxiUbTDVnjFVto-ZKtUXK7ZLzM9XwA3JLu_AyIXbDwLPS_0g4UkUJt1-JqLQ7_VE5Hdj4XUjWNPc_eq1n_4eALLRU64IBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 74898e5cf6c816671798918d4a0e94d8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/bb/50/84/bb508427cfd828e3fb0ef055fa989e60/1779810849.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.380Z","timestamp":1788682696380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/bb/50/84/bb508427cfd828e3fb0ef055fa989e60/1779810849.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55930\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 26 May 2026 15:54:09 GMT\r\netag: \"6a15c221-da7a\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55930,"size_decoded":56278,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=240, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x240, components 3","md5":"f88cbaf8f0439e2d0a58b3ba01b1a324","sha1":"7265e44fa91f5c068c0c291aa3bcca0290376f5f","sha256":"65fa3e6e39b3fe695d01a43bca60f4302c777a70c8122f1aea8ef58980f33862","sha512":"bb2d04159c08fc2949ada9e8e1de009817ce41653258427ee6b5f6903679147bae817d0561907f625e907da4befa12f7fc145194170f3753144779e5dfc18c65","ssdeep":"768:qb/0bOamZsiH/0bOamZhuYyCSVs11xS/7DcwnYhDsa6bsaKa18ZfjYE4/SxR:hbOTObOTnueSVsfiaJMfKkAcEfj","tlshash":"7743e022af938e17f8e5973898f3c79523113f9983e326163c4c06647f382d19caa136","first_seen":"2026-05-30T18:39:12.705166Z","last_seen":"2026-09-22T00:24:28.593694Z","times_seen":126,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":23,"dns":0,"connect":19,"send":0,"wait":75,"receive":19,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/pixel/ase","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.398Z","timestamp":1788682696398,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4342\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4342,"data":"[{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.bb.ready\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"5323869a8beda1d7db01e9c875b2f49f\"}},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.invoke_init.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.ad_request.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\",\"extra_json\":{\"banners_count\":4}},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.ad_request.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\",\"extra_json\":{\"banners_count\":4}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":5701,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":42,"dns":0,"connect":17,"send":0,"wait":23,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/65/82/95/658295271204a09c6dd68c4df11e556e/1779984035.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.577Z","timestamp":1788682696577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/65/82/95/658295271204a09c6dd68c4df11e556e/1779984035.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63381\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 28 May 2026 16:00:35 GMT\r\netag: \"6a1866a3-f795\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63381,"size_decoded":63729,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:05:18 15:36:20], progressive, precision 8, 728x90, components 3","md5":"48cbae2498f7f786670d8cf1ded16685","sha1":"1be8c5cba2dd3ca62e35677857c03e75a98b1481","sha256":"67b26009cd0b333a69f31b920ee64a5a876b1bd8cc574940e296da4c7fc4cd0f","sha512":"8e282acca437a1309910cd1f0b1d1a168834b1bbc7de36e45c07e79d787f896e9619f5124763a27502a745eb26d5efbc677c586a71eac375ab678c84c3f3cf1c","ssdeep":"1536:DirHYQm/73tJN84Wqqitc7ryoAFGhOYqYQBGJkcV:3Qm/73tJmOvtzoAsWYb20","tlshash":"b353f155eb22cd22f6c55739c087d794ab259c18d9f3abc1363c50423bae2ca680d397","first_seen":"2026-05-29T07:34:57.261499Z","last_seen":"2026-09-22T14:30:20.884047Z","times_seen":943,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/impr.gif?sid=H4sIAAAAAAAC_1ySTYgcxRvGqyfL_5LDHyR-7EVaCKJgz1Z_Tye34McpGzGRCOKhuqp6trI93Z2u6pnJnDZGPO_Bgxeh95n9OAgh4sGrzkoQBGH75ILZixdvCoJn2c3gRuvwvm_V81L1PsXv053mhPTRsON3r5czledsLexT-7XbqhDlRNvrt2yX9ulV-7YqouCqPT0N9fiK6wd9-rr9juSb5ZpHXUpd6tpvq1pm5XTtTIWqHrpJ2I-CvusO-m7oYVr_90Q3FjSzIMYn5Dko0f3_1-xDKL5AMXr0ptSbpqzeeGvU5MyUNcbi4P1isygnBUbnZVZbyIqDZTdK3RHyeQ9lcbB0gXK8e-oCqepI74UnSIuD5ahIx3tPp01zyAKpuIjJeAGZH0KxBXj5AEocEYALrN9AMdpfL-sJu_dUZadqR1b--hNq0pGVJ5dQjB5ey9XUvlnmjVFloTHNWqjpAmq4QNUcwsx6UJNDcPMxlPiJ0N7LKEZ711lTMyhxfJm6jMYhT50sChMnjpLMYb7wHDEIBU1Dz5cRPfsjlS3AdA-NttAoC03WQ1P1MBLHNksGWZpEAUtkFmeCujFnoe8ncRB6WcRDNPw-lNgGr7dQ1VvYVJ91xFr96Ij8fLS6f7T6JbSwoA3BWLR7IteebvdFrpvUXWZvmf12XprhDtsrzVAWBKzeRi3aXVXd1Q_AzYX5LNNiXp4Glpp2zlLRzpUwBPXdZ-3G3sCJQ-Y5g5BzR3p8IJIky6jku5k2zb9aaeTEVHgOE4l0PJ-xIGZhLINop1qiZH33xxCb8tj2mB95MuRMepT7vpSSeQmjvhsEqchoBK1aKN0D0xZmqiMffPMLKtUR66VXkbJD6PwQXF0Aa14Em8xjbwC2gYRiVny9wYrhkI2k7g-V2WjSviohyhaVWYG5Z0EaspOfkEvz925d-_aMFvn4EST_kSwXeN2iqlvcUd8TDPP7X92ojBqpGTvF56ZhRv4PTB1t_AauOvL87_KM4yuXH4NXW9DVPzfNc111RM4uQpcEaUWQK4Jcnj_F0hb6mX16Xu_oTzCsLaS5NU_zmuymeZ1vQ6tje-B5lHLXS0QSBok_yGQYuHEsQ9ePJPVDGN3d-eKVH_4eAOvTAAxNBAAA","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.578Z","timestamp":1788682696578,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:39:42 GMT","end":"Tue, 24 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"64:94:D5:7E:85:BC:06:31:05:FA:D2:57:67:61:B8:39:DE:C2:0B:85","sha256":"C2:67:CB:CB:4E:30:0F:8F:62:75:A6:1E:7B:32:F0:CA:EA:28:34:D9:5D:06:FD:CF:55:31:BE:CF:94:24:F3:B5"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1ySTYgcxRvGqyfL_5LDHyR-7EVaCKJgz1Z_Tye34McpGzGRCOKhuqp6trI93Z2u6pnJnDZGPO_Bgxeh95n9OAgh4sGrzkoQBGH75ILZixdvCoJn2c3gRuvwvm_V81L1PsXv053mhPTRsON3r5czledsLexT-7XbqhDlRNvrt2yX9ulV-7YqouCqPT0N9fiK6wd9-rr9juSb5ZpHXUpd6tpvq1pm5XTtTIWqHrpJ2I-CvusO-m7oYVr_90Q3FjSzIMYn5Dko0f3_1-xDKL5AMXr0ptSbpqzeeGvU5MyUNcbi4P1isygnBUbnZVZbyIqDZTdK3RHyeQ9lcbB0gXK8e-oCqepI74UnSIuD5ahIx3tPp01zyAKpuIjJeAGZH0KxBXj5AEocEYALrN9AMdpfL-sJu_dUZadqR1b--hNq0pGVJ5dQjB5ey9XUvlnmjVFloTHNWqjpAmq4QNUcwsx6UJNDcPMxlPiJ0N7LKEZ711lTMyhxfJm6jMYhT50sChMnjpLMYb7wHDEIBU1Dz5cRPfsjlS3AdA-NttAoC03WQ1P1MBLHNksGWZpEAUtkFmeCujFnoe8ncRB6WcRDNPw-lNgGr7dQ1VvYVJ91xFr96Ij8fLS6f7T6JbSwoA3BWLR7IteebvdFrpvUXWZvmf12XprhDtsrzVAWBKzeRi3aXVXd1Q_AzYX5LNNiXp4Glpp2zlLRzpUwBPXdZ-3G3sCJQ-Y5g5BzR3p8IJIky6jku5k2zb9aaeTEVHgOE4l0PJ-xIGZhLINop1qiZH33xxCb8tj2mB95MuRMepT7vpSSeQmjvhsEqchoBK1aKN0D0xZmqiMffPMLKtUR66VXkbJD6PwQXF0Aa14Em8xjbwC2gYRiVny9wYrhkI2k7g-V2WjSviohyhaVWYG5Z0EaspOfkEvz925d-_aMFvn4EST_kSwXeN2iqlvcUd8TDPP7X92ojBqpGTvF56ZhRv4PTB1t_AauOvL87_KM4yuXH4NXW9DVPzfNc111RM4uQpcEaUWQK4Jcnj_F0hb6mX16Xu_oTzCsLaS5NU_zmuymeZ1vQ6tje-B5lHLXS0QSBok_yGQYuHEsQ9ePJPVDGN3d-eKVH_4eAOvTAAxNBAAA HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl29487207=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 59b067833fa5e745bfcda638b91f4cf8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSTYscVRR93dO6cSFKCK5CCyIKdqc-u6qSXfBjYzJqIhFcyPuqnpeurqrUe9Xd6Y2O8WM7CxE3QvXpnpksJCgu3GqPICIIqd2AmU3-gCCIS-mexgkW1L33nfu479zD-WxWnpAuSnr81tVsqpKEXvS7VvulmyoV2Vi3r91o21bXuty-qdKed7k9WYVidMl2va71cvsNyQfZRceyLcu27PbrqpBxNrm47kLl9-3I7_a8rm2HXdt3MCn-j-hyC5puQYxOyLNQon76Ufw-FF8iHX77qtQDk-WvvDYsE2qyAiNx-G46SLNxiuFZGRcNxOnh5jYyXRPyVRNZerjZAtlosdoCTNWkef4hWHq4oQo22j9lyxLIFEw8hfFoCZksoegSPLsLJR4QgAtc20Y6PLiWFWN657RLV92atP7-C2pck9bDc0iH968katK-niWlUVmqMYkrqMkSqr9EXi5hpk2o8RG4-RhK_E6s5gWkw_2rtCwolDh-wbKpFficdeKeH3UCGlmdiHHe8Twh7IjGoeuxtUYqXoLqBsrVrxoo4ybKvImhOG7TKIxZ1PNoJOMgFpYdcOq7bhR4vhP3uI-S70KJPfDi04Nc7JjBaGGKUi7KlOuZc-8U8qI1eLACvWjmfFN-kCdO5IWBY_kzG3mxe0-4gXQZ92YUA7UHLZ6ANjVpvP0hRqLaF4l2dHUgEl0ye5OdTXareWb6M7qfmb5MCWixh0JUC5Xf1nfBzdZ8Gmsxz1aBMlPNKRPVXAlDUNx-XCgqwk5AGeuEcSA6sQxi1xMslLGziLUpq1m-8Vfjpz8lBvK4Hcl4pWfoOqEb9TzRiwTrcSdidk8KP-pBqwpKN9cCT1VN3vvhD-SqJo3nXgSjR9DJEbjaAi1t0HEFulNhmn6_Q9N-nw6l7vaV2SlZV2UQWYXctGDuNCANmSUn5Nz8nRtXfly7R57sQ_LfyOYDLyrkRYVb6meCfrL73XZu1FBN6cpO1w018klQ9WD7H3BVk_PPfLn29SXnAnj-EXT-36R5ovOayEcj6IyA5U0kiiCRZ09RVkE_dmZn9Ux_gn7RAktac5YUrQVLiuSLmrypPl9TXg9eVb9Aq-N26DiWxW0nEpHvRW4YS9-zg0D6ttuTluvD6PrW18__-u8AeH_PBHEEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.500Z","timestamp":1788682697500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSTYscVRR93dO6cSFKCK5CCyIKdqc-u6qSXfBjYzJqIhFcyPuqnpeurqrUe9Xd6Y2O8WM7CxE3QvXpnpksJCgu3GqPICIIqd2AmU3-gCCIS-mexgkW1L33nfu479zD-WxWnpAuSnr81tVsqpKEXvS7VvulmyoV2Vi3r91o21bXuty-qdKed7k9WYVidMl2va71cvsNyQfZRceyLcu27PbrqpBxNrm47kLl9-3I7_a8rm2HXdt3MCn-j-hyC5puQYxOyLNQon76Ufw-FF8iHX77qtQDk-WvvDYsE2qyAiNx-G46SLNxiuFZGRcNxOnh5jYyXRPyVRNZerjZAtlosdoCTNWkef4hWHq4oQo22j9lyxLIFEw8hfFoCZksoegSPLsLJR4QgAtc20Y6PLiWFWN657RLV92atP7-C2pck9bDc0iH968katK-niWlUVmqMYkrqMkSqr9EXi5hpk2o8RG4-RhK_E6s5gWkw_2rtCwolDh-wbKpFficdeKeH3UCGlmdiHHe8Twh7IjGoeuxtUYqXoLqBsrVrxoo4ybKvImhOG7TKIxZ1PNoJOMgFpYdcOq7bhR4vhP3uI-S70KJPfDi04Nc7JjBaGGKUi7KlOuZc-8U8qI1eLACvWjmfFN-kCdO5IWBY_kzG3mxe0-4gXQZ92YUA7UHLZ6ANjVpvP0hRqLaF4l2dHUgEl0ye5OdTXareWb6M7qfmb5MCWixh0JUC5Xf1nfBzdZ8Gmsxz1aBMlPNKRPVXAlDUNx-XCgqwk5AGeuEcSA6sQxi1xMslLGziLUpq1m-8Vfjpz8lBvK4Hcl4pWfoOqEb9TzRiwTrcSdidk8KP-pBqwpKN9cCT1VN3vvhD-SqJo3nXgSjR9DJEbjaAi1t0HEFulNhmn6_Q9N-nw6l7vaV2SlZV2UQWYXctGDuNCANmSUn5Nz8nRtXfly7R57sQ_LfyOYDLyrkRYVb6meCfrL73XZu1FBN6cpO1w018klQ9WD7H3BVk_PPfLn29SXnAnj-EXT-36R5ovOayEcj6IyA5U0kiiCRZ09RVkE_dmZn9Ux_gn7RAktac5YUrQVLiuSLmrypPl9TXg9eVb9Aq-N26DiWxW0nEpHvRW4YS9-zg0D6ttuTluvD6PrW18__-u8AeH_PBHEEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8e20768822368f0fce2f98193010d26c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9yeT7QFwIOooLkSjSKJh0_Sfl7AZ_NjPdOj-M4ELeX6XfpFJVU-9VksnKdtR1L1yIIFRO0t2zkEFx4dZJuxOEKXDR4PRGcC0IMktJOk6LBXXvfec-7jv3cD6bFiekjYIev3s5nag4ppt-22q-ekMlIh3p5ta1pm21rQvNGyoJvAvN8TLkwzds12tbrzXfkbyfbjqWbVm2ZTffVrmM0vHmqguV3bNDvx14bdvutm3fwTj_L6KLBjRtQAxPyNNQonrqt-gDKL5AMvjmTan7Js1ef2tQxNSkOYbi8HrST9JRgsFZGeU1RMnh-jZSXRHyRR1pcrjeAulwvtwCTFWk_txDsORwTRVsuH_KlsWQCZh4EqPhAjJeQNEFeHoHSjwgABfY2kYyONhK8xG9fdqly25FGn_9CTWqSOPheSSDexdjNW5eTePCqDTRGEcl1HgB1VsgKxYwkzrU6AjcfAwlfiZW_UUkg_3LtMgplDh-xbKp1fE5a0WBH7Y6NLRaIeO85XlC2CGNuq7HVhqpaAGqayiWv6qhiOoosjoG4rhJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-C6U2APPPz3IxI7pD-cmL-S8SLieundPIS9cgQdL0Aun7tfFh1nshF6341j-1EaW794Vbke6jHtTir7agxZPQJuK1N7TGIpyX8Ta0eWBiHXB7HV21tktZ6npTel-anoyIaD5HnJRzlV2S98BN-dmk0iLWboMlJlyRpkoZ0oYgvzWY6F4y6G82-pEAW1Rylmryx3JfUe6QceeR9oU5TRb-6t2_w-JvjxuhjJa6tl1na4bBp4IQsEC7oTMDqTwwwBalVC6vhJ4oiry_ve_IlMVqT2_AUaPoOMjcHUOtLBBRyXoTolJ8t0OTXo9OpC63VNmp2BtlUKkJTLTgLldgzRkGp-Q87Mr1y7-sHLPxv0vIflPZP2B5yWyvMRN9SNBL979djszaqAmdGmnq4Ya-X9Q9WD7EbiqyP8evbzy9TPXr4BnH0FnjyfNYp1V5NKzL0CnBCyrIVYEsTx7irIS-l9ndlZP9Sfo5Q2wuDFjcd6YsziPP1-xrcil7u8V2cA_09Vxs-s4lsVtJxSh74VuN5K-Z3c60rfdQFquD6Orm1-99MvfAwCXKu7EcQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.769Z","timestamp":1788682709769,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9yeT7QFwIOooLkSjSKJh0_Sfl7AZ_NjPdOj-M4ELeX6XfpFJVU-9VksnKdtR1L1yIIFRO0t2zkEFx4dZJuxOEKXDR4PRGcC0IMktJOk6LBXXvfec-7jv3cD6bFiekjYIev3s5nag4ppt-22q-ekMlIh3p5ta1pm21rQvNGyoJvAvN8TLkwzds12tbrzXfkbyfbjqWbVm2ZTffVrmM0vHmqguV3bNDvx14bdvutm3fwTj_L6KLBjRtQAxPyNNQonrqt-gDKL5AMvjmTan7Js1ef2tQxNSkOYbi8HrST9JRgsFZGeU1RMnh-jZSXRHyRR1pcrjeAulwvtwCTFWk_txDsORwTRVsuH_KlsWQCZh4EqPhAjJeQNEFeHoHSjwgABfY2kYyONhK8xG9fdqly25FGn_9CTWqSOPheSSDexdjNW5eTePCqDTRGEcl1HgB1VsgKxYwkzrU6AjcfAwlfiZW_UUkg_3LtMgplDh-xbKp1fE5a0WBH7Y6NLRaIeO85XlC2CGNuq7HVhqpaAGqayiWv6qhiOoosjoG4rhJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-C6U2APPPz3IxI7pD-cmL-S8SLieundPIS9cgQdL0Aun7tfFh1nshF6341j-1EaW794Vbke6jHtTir7agxZPQJuK1N7TGIpyX8Ta0eWBiHXB7HV21tktZ6npTel-anoyIaD5HnJRzlV2S98BN-dmk0iLWboMlJlyRpkoZ0oYgvzWY6F4y6G82-pEAW1Rylmryx3JfUe6QceeR9oU5TRb-6t2_w-JvjxuhjJa6tl1na4bBp4IQsEC7oTMDqTwwwBalVC6vhJ4oiry_ve_IlMVqT2_AUaPoOMjcHUOtLBBRyXoTolJ8t0OTXo9OpC63VNmp2BtlUKkJTLTgLldgzRkGp-Q87Mr1y7-sHLPxv0vIflPZP2B5yWyvMRN9SNBL979djszaqAmdGmnq4Ya-X9Q9WD7EbiqyP8evbzy9TPXr4BnH0FnjyfNYp1V5NKzL0CnBCyrIVYEsTx7irIS-l9ndlZP9Sfo5Q2wuDFjcd6YsziPP1-xrcil7u8V2cA_09Vxs-s4lsVtJxSh74VuN5K-Z3c60rfdQFquD6Orm1-99MvfAwCXKu7EcQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e97513ae88971fd5f72e8ebd9c2ae47b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbs?c=1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.623Z","timestamp":1788682705623,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, X-Device-User-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Ucbrowser-Device-Ua, User-Agent\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitnoxePAgxiCBIK7IouLPdPd090-YW_HHKrpqVCJ6quqpnK9PT1emqnpnMadeIiCDswYMXoefNbvYWFIVczawHQRDStwGzF_8BQZAcZWYHV9LQ7_uqXlH1Xr36YlqekRZKuvjguprINKVbQcux37gpM65G2t7etV2n5Vy1b8os9K_a4yUUw7fdtt9y3rTfF3FfbXmO6ziu49rvyUIkary1YiHz-24UtEK_5brdlht4GBdPz-jSgqYW-PCMXIbk9fN_Jp9CxnNkg-_fEbpvVP7Wu4MypUYVGPKTj7N-pkYZBhdtUlhIspP1aihdE_JtAyo7WbuAGh4tXYDJmjRefAyWnaylgg2Pz9WyFCID489hNJxDpHNIOkes7kLyRwSIObZ3kA3ubatiRO-cs3TJ1qT5z9-Qo5o0H19BNrh_LZVj-4ZKSyNVpjFOKsjxHLI3R16ewkwakKNTxOYzSP47cRqvIBscX6dlQSF5tbIvkzmotlAuf2mhTBoo8wYGfGHTqJuwKPRpJJJOwh23E9Og3Y46fuAlYRygjA8g-SHiYh95sY--PITmFrSpifXhPoa8Ouap9nR1j6e6ZO66euvarmbK9Kb0WJmeyAhocYiCV0cyv63vIjaXZpNE85laAmWmmlHGq5nkhqC4vXjdcanTCWK2mYRBsNlxPWeTUSfeDJ1Ox2cJ5Z4fHCXalNU0X8duPfxLoC8WdiQS3-e82_a67Sj0eRhxFsZexNxQ8CAKoWUFqRury5nImnzy4A_ksibWSxtg9BQ6PUUsL4GWLuioAt2rMMl-3KNZr0cHQrd60uyVrCUVuKqQmybMHQvCkGl6Rq7MPtq99vMq1I2fvoKIfyPrD3FRIS8q3JK_EPTSgx92ciMHckKXKd8w1IhnQeWjnSeIZU2eefLa6rm9sP0l4nwfOv9vp1mq85psPPwaWhGwvIFUEqTi4ijKKuj_jdlFP9Wfo1c0wdLmjKVF84ilRfpNTcSDl1eSl3BQk-TyLrRc2F3Pc5zY9SIeBX7U7iYi8N1ORwRuOxROO4DR9a3vXv313wEAdzIuxggEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.369Z","timestamp":1788682696369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitnoxePAgxiCBIK7IouLPdPd090-YW_HHKrpqVCJ6quqpnK9PT1emqnpnMadeIiCDswYMXoefNbvYWFIVczawHQRDStwGzF_8BQZAcZWYHV9LQ7_uqXlH1Xr36YlqekRZKuvjguprINKVbQcux37gpM65G2t7etV2n5Vy1b8os9K_a4yUUw7fdtt9y3rTfF3FfbXmO6ziu49rvyUIkary1YiHz-24UtEK_5brdlht4GBdPz-jSgqYW-PCMXIbk9fN_Jp9CxnNkg-_fEbpvVP7Wu4MypUYVGPKTj7N-pkYZBhdtUlhIspP1aihdE_JtAyo7WbuAGh4tXYDJmjRefAyWnaylgg2Pz9WyFCID489hNJxDpHNIOkes7kLyRwSIObZ3kA3ubatiRO-cs3TJ1qT5z9-Qo5o0H19BNrh_LZVj-4ZKSyNVpjFOKsjxHLI3R16ewkwakKNTxOYzSP47cRqvIBscX6dlQSF5tbIvkzmotlAuf2mhTBoo8wYGfGHTqJuwKPRpJJJOwh23E9Og3Y46fuAlYRygjA8g-SHiYh95sY--PITmFrSpifXhPoa8Ouap9nR1j6e6ZO66euvarmbK9Kb0WJmeyAhocYiCV0cyv63vIjaXZpNE85laAmWmmlHGq5nkhqC4vXjdcanTCWK2mYRBsNlxPWeTUSfeDJ1Ox2cJ5Z4fHCXalNU0X8duPfxLoC8WdiQS3-e82_a67Sj0eRhxFsZexNxQ8CAKoWUFqRury5nImnzy4A_ksibWSxtg9BQ6PUUsL4GWLuioAt2rMMl-3KNZr0cHQrd60uyVrCUVuKqQmybMHQvCkGl6Rq7MPtq99vMq1I2fvoKIfyPrD3FRIS8q3JK_EPTSgx92ciMHckKXKd8w1IhnQeWjnSeIZU2eefLa6rm9sP0l4nwfOv9vp1mq85psPPwaWhGwvIFUEqTi4ijKKuj_jdlFP9Wfo1c0wdLmjKVF84ilRfpNTcSDl1eSl3BQk-TyLrRc2F3Pc5zY9SIeBX7U7iYi8N1ORwRuOxROO4DR9a3vXv313wEAdzIuxggEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e09cd9efd973c1571bd41b2de9808e69\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/watch.1740464712439.js?dev=e\u0026fstu=01a075cb-f706-70d2-ad9e-23aa47a57e46\u0026key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026ps1=1788682696\u0026rb=e\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026res=14.1055\u0026rmtc=t\u0026sht=77I4JErorGmTZsLhomY7j47Xv6Zn6fgYQp1YMz2anUc\u0026shv=2\u0026st1=8273de5e94778d82b26bab8c5af30bb0\u0026tz=0\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.471Z","timestamp":1788682696471,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:39:42 GMT","end":"Tue, 24 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"64:94:D5:7E:85:BC:06:31:05:FA:D2:57:67:61:B8:39:DE:C2:0B:85","sha256":"C2:67:CB:CB:4E:30:0F:8F:62:75:A6:1E:7B:32:F0:CA:EA:28:34:D9:5D:06:FD:CF:55:31:BE:CF:94:24:F3:B5"}}},"request":{"raw":"GET /watch.1740464712439.js?dev=e\u0026fstu=01a075cb-f706-70d2-ad9e-23aa47a57e46\u0026key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026ps1=1788682696\u0026rb=e\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026res=14.1055\u0026rmtc=t\u0026sht=77I4JErorGmTZsLhomY7j47Xv6Zn6fgYQp1YMz2anUc\u0026shv=2\u0026st1=8273de5e94778d82b26bab8c5af30bb0\u0026tz=0\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://learnquester.pages.dev\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:16 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\npdhtkv23=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs23=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nu_pl29487207=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 15\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: eb32cf6f0b469fb3c7238136705205dd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-769f-a3d2-d85d0b523e60:2:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:16Z","raw_expires":"Sun, 13 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"pdhtkv23","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv23=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs23","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs23=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"u_pl29487207","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl29487207=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4084,"size_decoded":4172,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3208)","md5":"c4c3ab5f1f682810b76217119fcd3bf3","sha1":"bf5362c996fa6da7d5093777764ffc1c051a05c9","sha256":"fa8eace1949636d240ddf631e69bf760577ce2caff9c67e80869cb1db366eec4","sha512":"78504d437a71f511bffb000295f86be107582501eb333210ee742fbcee4d26ee3055ccd0844cd011c178884b4d93738619626dee3581632eaec0ab1675bf6f12","ssdeep":"","tlshash":"5c81096a0dd5c078a523a12f52ea720d2e72950b27008851f98caf155f54ab00efddec","first_seen":"2026-09-06T08:18:49.303257Z","last_seen":"2026-09-06T08:18:49.303257Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/pixel/ase","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.419Z","timestamp":1788682697419,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1935\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1935,"data":"[{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.ad_request.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\",\"extra_json\":{\"banners_count\":4}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3294,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/a4/9c/e3/a49ce3eb35071b0ca67a9ac9bc74cffa/1780396565.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.486Z","timestamp":1788682697486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/a4/9c/e3/a49ce3eb35071b0ca67a9ac9bc74cffa/1780396565.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 124770\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 02 Jun 2026 10:36:05 GMT\r\netag: \"6a1eb215-1e762\"\r\nexpires: Tue, 08 Sep 2026 08:18:17 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124770,"size_decoded":125119,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"04f578da37afdb282731a74112ea087c","sha1":"73601484a4d676c7907479fd8053fa4a9a94b302","sha256":"cd0bb11ff234b60c1ab76bbcff19b43bc40a3c00a4bb18fdac76389a80b78683","sha512":"5cd673c70c4107a22b45ad6cf55ddcf73b61e5e01ea94e004dc5a16626d7be5defb53151fe4e80878fa25a883d40f40ed49af2a82528fc602bf9650564d4fe12","ssdeep":"1536:/HMx3Dm7hlIeY58ysKmdOr3P/2Ci07CrMCGxEL5O9xc0g7GJevCfMc/S8J8:0x3q7wTr3P/X+rGEtcxQafM0S8e","tlshash":"d8c302181accfee6fc1254f4b02cadd0be545d63ac437e492212c5968bfaca121d6fd4","first_seen":"2026-06-05T06:41:53.624967Z","last_seen":"2026-09-21T03:07:37.559011Z","times_seen":109,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:18.356Z","timestamp":1788682698356,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 713\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":713,"data":"[{\"placement_key\":\"2a362e5cae20c33eeea29a03144bdf06\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.bb.ready\",\"id_frontend_invoke\":\"01a075cb-fa89-7574-b9f5-c7f159b6a8ca\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"1b50e57a5911fd0a5b46962ab48ca22b\"}},{\"placement_key\":\"2a362e5cae20c33eeea29a03144bdf06\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.load_watch.success\",\"id_frontend_invoke\":\"01a075cb-fa89-7574-b9f5-c7f159b6a8ca\",\"script_version\":\"\"},{\"placement_key\":\"2a362e5cae20c33eeea29a03144bdf06\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-fa89-7574-b9f5-c7f159b6a8ca\",\"script_version\":\"\",\"extra_json\":{\"path\":\"iframe\"}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, X-Device-User-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Ucbrowser-Device-Ua, User-Agent\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2063,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":98,"send":0,"wait":99,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/css/animate.css","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.613Z","timestamp":1788682704613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/css/animate.css HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 08:18:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65aa8501-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pT3FO%2FKt74U9%2BDn7SVOEhGl9NMSMkZiZVIgE2MNddKIeVH7vlK%2Btgeyj%2F66VVBeagmMpIPuu5BM4lO1jxUmUHWUnockqqPA4H6LLd39PuUmQt%2FBMgzf2ZUxdSdf5hsC6T8JRTaaCoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36c0af7ee347131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":5689,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-09-23T03:04:04.576639Z","times_seen":14652,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/a8/13/19/a81319f01bc8eaeef4f68662023382a4/1708350096.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.423Z","timestamp":1788682696423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/a8/13/19/a81319f01bc8eaeef4f68662023382a4/1708350096.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20528\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 19 Feb 2024 13:41:44 GMT\r\netag: \"65d35a98-5030\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20528,"size_decoded":20876,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"6ca860445e650b57e3863f09c16a7522","sha1":"0bbf311fc9833d005010ae82efd75ca96d15fd1e","sha256":"f7d014b4fff115b3d68be1307caeb79f2a0841678fc643f8abae0d2dad1c7e2b","sha512":"d6bf0e6723e913a2fd993f8778184d4b144974b56b3d1172d49ec278f3c4019c1d9c0e46c8b4b349254b6a2e7f0bb3763df7ede8a1c1168cea5b9dc8a5b16488","ssdeep":"384:YVizgyzCRcA1bBMsYLKammRU9Y/jLnOgIVKPautn9PEqMHUiZSdR12S6Wp:YYGRR3fgMmRXTOBVKPac9P3M02SdXPp","tlshash":"5492d0035594fbd7fcecaa37a9ed1d61a3d4823327c2926c37e4c1a284539e6d93d428","first_seen":"2024-03-02T21:12:14Z","last_seen":"2026-09-21T10:42:36.662286Z","times_seen":172,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":79,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/8d/ba/63/8dba6381825d72543a9f70a17ef071b5/1708430835.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.429Z","timestamp":1788682696429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/8d/ba/63/8dba6381825d72543a9f70a17ef071b5/1708430835.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17345\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 20 Feb 2024 12:07:24 GMT\r\netag: \"65d495fc-43c1\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17345,"size_decoded":17693,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"169faeb44639884a5f4a2ee37b0d4965","sha1":"4687373e4a17a61a0c1c2b35638781e30cfb984f","sha256":"c98d3acc51f013a8a5a952c0423725286f59c88a809351e6b6dedbdc72b5338a","sha512":"4f2b0b7a7d8a1bf6eb58e0fd8aa8418b425f536b878629f14037ddc0c2800e80ed4fcc70ea0dc6d4e24c310c7078c52d6412635a543a73385b71ee18ad591f66","ssdeep":"384:Yw07FAo2dZ/H5DQHQLjPECmCqv1y81Yj1N9UF7dutR63/+0gluIT:YdxadPDw6TmCqPaJ8FRQRg+0AT","tlshash":"7272c0653fe7d5d1b9c4c2a1a1161ca78adc994ff5e5a6cfdbe24315ca3d0d0e020e81","first_seen":"2024-04-30T16:15:51Z","last_seen":"2026-09-21T10:37:30.858612Z","times_seen":168,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":79,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/ads.json","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.161Z","timestamp":1788682694161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /ads.json HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/category-top-down251\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 08:18:14 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qm%2BVOnR7J9%2BLKXh8itTkN2mwxLeJxHULdK7J8C%2BVVC3vJ2QtxVJ05q0owob1Pq4CwmOAhosPMbznh8NRHtiPfpOxVbdFEQGR0zGgx%2FDGDKdR2gJUSQ1pwnR%2BO3SXZgYP5Fy%2FX%2FgvWkeA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cceaa7f4276011bdb27d83999402a7c6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a36c0ab68bc40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4451,"size_decoded":1729,"mime_type":"application/json","magic":"JSON text data","md5":"7d0bbd275e759c93c434c6873abcaf6c","sha1":"f18f0834f1c2050400c231cf36d3e75752650465","sha256":"effd71adace2dd325a2c04d1fd3f2f16cd0cded5f399080dc48ac27994778ac2","sha512":"064910ebd35ab87179f97fb9d3c17dfb415409c3224e541c259b9e7d4c54f3f746e5884ad609c7da504659fd74c8e39fddb4e3c6443f597e0e73f3a65583c292","ssdeep":"96:IMlA8Ag6XU9S77yvD7lUl8FyWKXU9y497lUl8FyPxS7lclEFakl5jacVLr0Sfv:IMlAfX6iyb7OqyFX6yA7OqyPM72yakzv","tlshash":"ee91eb9ecc784cb614c4a96aea7d11026630b4831e963c2837ac448c0f4d67e1af7bec","first_seen":"2026-09-06T07:11:29.878766Z","last_seen":"2026-09-07T05:25:38.92049Z","times_seen":9,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngxePAghBEGQFiQouLPdPd0928lFgj9O2Y1mJYKn-tE1W9merk5X9cxkTrtGPHjagwcvQu-b3exBCIpCrjrrQRCE9G3A7MV_QBDEo8zs4EoK6vu-qld89V69-vywOiMdVHR--5aeqCyj61HHc9-4q3KhR8bd3HZ9r-PdcO-qPA5vuONFKIfX_W7Y8d5030_5rl4PPN_zfM9331NlKvV4fYlCFY_9JOrEYcf3Nzp-FGBcPr9jKgeGOhDDM3IZSjQv_SE_geIz5INv30nNrtXFW-8OqoxaXWIoTj7Kd3M9yjG4KGXpQOYnq9PQpiHkqxZ0frJSAT08WqgAUw1pXX0Glp-sqIINj8_ZsgxpDiZexGg4Q5rNoOgMXD-EEk8JwAU2t5APHm3qckQfnKN0gTak_fdfUKOGtJ9dQT54fDNTY_eOziqrdG4wljXUeAbVn6GoTmEnLajRKbj9FEr8RrzWq8gHx7doVVIoUS_lKzkDNQ6qxVQOKtlCVbQwEHOXJhuSJXFIk1T2pPD8HqdRt5v0wiiQMY9Q8X0ocQBe7qEo97CrDmCEA2Mb4nywh6Goj0VmAlM_EpmpmL_KwSp366m2_UN6rG0_zQloeYBS1EequG8egttL04k0YqoXgTJbTykT9VQJS1Den7_u-dTrRZytyTiK1np-4K0x6vG12Ov1QiapCMLoSBpb1YfFynbnpz9T7KZzN0llGAqx0Q02ukkcijgRLOZBwvw4FVESw6gayrSWjzNRDfn4ye8oVEOcl6-B0VOY7BRcXQKtfNBRDbpTY5J_v0Pzfp8OUtPpK7tTsY7SELpGYduwDxyklhxmZ-TK9MPtmz8uTZWXt5HyX8lqgJc1irLGPfUzQT_b_26rsGqgJnTh8h1LbfoCqHq69Q-4ashV95vld7t--23wYg-m-K_TNDNFQ6798AWMJmBFG5kiyNKLqyirYf63Zhf1ofkM_bINlrWnLCvbRywrsy8bkj55ZdlzEfbPyRs1dz0Rpj5PaNSTaRRFLAoDLiXzeoHsdoONBNY0975-7Zd_BwDpzGMzCAQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.365Z","timestamp":1788682696365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngxePAghBEGQFiQouLPdPd0928lFgj9O2Y1mJYKn-tE1W9merk5X9cxkTrtGPHjagwcvQu-b3exBCIpCrjrrQRCE9G3A7MV_QBDEo8zs4EoK6vu-qld89V69-vywOiMdVHR--5aeqCyj61HHc9-4q3KhR8bd3HZ9r-PdcO-qPA5vuONFKIfX_W7Y8d5030_5rl4PPN_zfM9331NlKvV4fYlCFY_9JOrEYcf3Nzp-FGBcPr9jKgeGOhDDM3IZSjQv_SE_geIz5INv30nNrtXFW-8OqoxaXWIoTj7Kd3M9yjG4KGXpQOYnq9PQpiHkqxZ0frJSAT08WqgAUw1pXX0Glp-sqIINj8_ZsgxpDiZexGg4Q5rNoOgMXD-EEk8JwAU2t5APHm3qckQfnKN0gTak_fdfUKOGtJ9dQT54fDNTY_eOziqrdG4wljXUeAbVn6GoTmEnLajRKbj9FEr8RrzWq8gHx7doVVIoUS_lKzkDNQ6qxVQOKtlCVbQwEHOXJhuSJXFIk1T2pPD8HqdRt5v0wiiQMY9Q8X0ocQBe7qEo97CrDmCEA2Mb4nywh6Goj0VmAlM_EpmpmL_KwSp366m2_UN6rG0_zQloeYBS1EequG8egttL04k0YqoXgTJbTykT9VQJS1Den7_u-dTrRZytyTiK1np-4K0x6vG12Ov1QiapCMLoSBpb1YfFynbnpz9T7KZzN0llGAqx0Q02ukkcijgRLOZBwvw4FVESw6gayrSWjzNRDfn4ye8oVEOcl6-B0VOY7BRcXQKtfNBRDbpTY5J_v0Pzfp8OUtPpK7tTsY7SELpGYduwDxyklhxmZ-TK9MPtmz8uTZWXt5HyX8lqgJc1irLGPfUzQT_b_26rsGqgJnTh8h1LbfoCqHq69Q-4ashV95vld7t--23wYg-m-K_TNDNFQ6798AWMJmBFG5kiyNKLqyirYf63Zhf1ofkM_bINlrWnLCvbRywrsy8bkj55ZdlzEfbPyRs1dz0Rpj5PaNSTaRRFLAoDLiXzeoHsdoONBNY0975-7Zd_BwDpzGMzCAQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0e8bfb30f1905065bbef21c04483c939\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSumYxePAgSgidpQUTFme3fPW1uwR-XZFeSyAoetKqrerZ2ero7XdUzkzm5Rj1vQMGL0PPN7G4OEhQPueqsB0EQ0rcFs5f8A4IgHjzIzA6upqHfe_W-R9X3Pr7Pp-Up6aCkJ-9eyyYySeiG1zGNV7ZlyrORMjZvGpbZMS8b2zL13cvGeBmK4RuW43bMV413RNTPNmzTMk3LtIy3ZSHibLyxQiHz-1bodXy3Y1ndjuXZGBdPdlTZhKJN8OEpeQ6S188-jj-AjBZIB9--KVRfZ_nrbw3KhOqswJAfvZf202yUYnBexkUDcXq0nkamakK-aiJLj9ZbIBvOl1uAyZo0Lz0CS4_WVMGGB2dsWQKRgvFnMBouIJIFJF0gyu5A8ocEiDg2t5AODjezYkRvn6F0idak9ecfkKOatB5dRDq4fyWRY-NGlpRaZqnCOK4gxwvI3gJ5uYCeNCFHx4j0J5D8V2I2X0A6OLhGy4JC8pOXTIuagRexdux7YTugodkOWRS1XZdzK6Rx13HZSiMZL0BVA-Xylw2UcRNl3sSAnxg07MYs9F0aijiIuWkFEfUcJwxcz479yEMZ7UHyfUTFZ4dlGik3nFrflB_miR263cA2val1mPMd3R_OdVGK-XJmat07a7nhqom82LvHnUA4LHKnFH25D8UbUJpgyKsDnihbVYc8USWz1tleZ6eaZbo3pQeZ7omUgBb7KHg1l_ktdQeRvjCbxIrPsmWgTFczyng1k1wTFLf-JxK124Fv2u2ucOO2G8dhYAdWwDmfx0qX1TRfe6vx4-8CfXFihCJeatl17K4T-i73Q878yA6Z5QvuhT6UrCBVcyXuRNbk_Qe_IZc1aTz_Mhg9hkqOEckLoKUFOqpAdypM0u93aNrr0YFQnZ7UOyXryAw8q5DrFvTtBoQm0-SUXJxdv3nlh5Vzrn50FyL6haw_REWFvKiwK38i6CV7323lWg7khC6tdENTLZ4GlQ-3_kIka_LU31-uPP3a3W1E-cdQ-b83zRKV10Q8vg6VEbC8iUQSJOL8KcoqqP-c2Xk9VZ-iV7TAktaMJUVrzpIi-aIm4sGlFeWaXN3dWYYcSp4YXds2zciyQx56buh0Y-G5VhAIz3J8YToetKp3v37x538GAJjFm5htBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.440Z","timestamp":1788682696440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSumYxePAgSgidpQUTFme3fPW1uwR-XZFeSyAoetKqrerZ2ero7XdUzkzm5Rj1vQMGL0PPN7G4OEhQPueqsB0EQ0rcFs5f8A4IgHjzIzA6upqHfe_W-R9X3Pr7Pp-Up6aCkJ-9eyyYySeiG1zGNV7ZlyrORMjZvGpbZMS8b2zL13cvGeBmK4RuW43bMV413RNTPNmzTMk3LtIy3ZSHibLyxQiHz-1bodXy3Y1ndjuXZGBdPdlTZhKJN8OEpeQ6S188-jj-AjBZIB9--KVRfZ_nrbw3KhOqswJAfvZf202yUYnBexkUDcXq0nkamakK-aiJLj9ZbIBvOl1uAyZo0Lz0CS4_WVMGGB2dsWQKRgvFnMBouIJIFJF0gyu5A8ocEiDg2t5AODjezYkRvn6F0idak9ecfkKOatB5dRDq4fyWRY-NGlpRaZqnCOK4gxwvI3gJ5uYCeNCFHx4j0J5D8V2I2X0A6OLhGy4JC8pOXTIuagRexdux7YTugodkOWRS1XZdzK6Rx13HZSiMZL0BVA-Xylw2UcRNl3sSAnxg07MYs9F0aijiIuWkFEfUcJwxcz479yEMZ7UHyfUTFZ4dlGik3nFrflB_miR263cA2val1mPMd3R_OdVGK-XJmat07a7nhqom82LvHnUA4LHKnFH25D8UbUJpgyKsDnihbVYc8USWz1tleZ6eaZbo3pQeZ7omUgBb7KHg1l_ktdQeRvjCbxIrPsmWgTFczyng1k1wTFLf-JxK124Fv2u2ucOO2G8dhYAdWwDmfx0qX1TRfe6vx4-8CfXFihCJeatl17K4T-i73Q878yA6Z5QvuhT6UrCBVcyXuRNbk_Qe_IZc1aTz_Mhg9hkqOEckLoKUFOqpAdypM0u93aNrr0YFQnZ7UOyXryAw8q5DrFvTtBoQm0-SUXJxdv3nlh5Vzrn50FyL6haw_REWFvKiwK38i6CV7323lWg7khC6tdENTLZ4GlQ-3_kIka_LU31-uPP3a3W1E-cdQ-b83zRKV10Q8vg6VEbC8iUQSJOL8KcoqqP-c2Xk9VZ-iV7TAktaMJUVrzpIi-aIm4sGlFeWaXN3dWYYcSp4YXds2zciyQx56buh0Y-G5VhAIz3J8YToetKp3v37x538GAJjFm5htBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a03632316e8a0f2baa6f83da0d7910be\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9Sef7QFwIOooLkSjSKJh0_Sfl7AZHNzPd6oyM4ELeX6XfpFJVU-9VksnKdtR1L1yIIFRO0t2zkEFx4dZJuxOEKXDR4PRGcC0IMktJOkyLBXXvfec-7jv3cD6fFqekjYKevHM1nag4plt-22q-ekMlIh3p5vb1pm21rYvNGyoJvIvN8TLkwzds12tbrzXflryfbjmWbVm2ZTffUrmM0vHWqguV3bNDvx14bdvutm3fwTj_L6KLBjRtQAxPydNQonrq9-hDKL5AMvj2Tan7Js1evzwoYmrSHENx9H7ST9JRgsF5GeU1RMnR-jZSXRHyZR1pcrTeAulwvtwCTFWk_txDsORoTRVseHDGlsWQCZh4EqPhAjJeQNEFeHoHSjwgABfY3kEyONxO8xG9fdaly25FGn__BTWqSOPhBSSDe5diNW5eS-PCqDTRGEcl1HgB1VsgKxYwkzrU6BjcfAIlfiFW_UUkg4OrtMgplDh5xbKp1fE5a0WBH7Y6NLRaIeO85XlC2CGNuq7HVhqpaAGqayiWv6qhiOoosjoG4qRJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-B6U2AfPP_um-CiLndDrdhzLn9qHmdg1_eHc5IWcFwnXU_fuGeSFK_BwCXrh1EWW790Vbke6jHtTir7ahxZPQJuK1N7VGIryQMTa0eWhiHXB7HV21tktZ6npTelBanoyIaD5PnJRzlV2S98BNxuzSaTFLF0Gykw5o0yUMyUMQX7rsVC85VDebXWigLYo5azV5Y7kviPdoGPPI22Kcpqt_VW7_6dEX540Qxkt9ey6TtcNA08EoWABd0JmB1L4YQCtSihdXwk8URX54IffkKmK1J7fBKPH0PExuNoALWzQUQm6W2KSfL9Lk16PDqRu95TZLVhbpRBpicw0YG7XIA2Zxqfkwuy965d-XLlnExkk_5msP_C8RJaXuKl-IujFe9_tZEYN1IQu7XTNUCP_D6oe7DwCVxX536OXV75-5vIxePYxdPZ40izWWUU2738FnRKwbAOxIojl-VOUldD_OrPzeqo_RS9vgMWNGYvzxpzFefzFalxFrnT_WPGuyJVnX4BWJ82u41gWt51QhL4Xut1I-p7d6UjfdgNpuT6Mrm5-_dKv_wwAnl_aZnEEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.771Z","timestamp":1788682709771,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9Sef7QFwIOooLkSjSKJh0_Sfl7AZHNzPd6oyM4ELeX6XfpFJVU-9VksnKdtR1L1yIIFRO0t2zkEFx4dZJuxOEKXDR4PRGcC0IMktJOkyLBXXvfec-7jv3cD6fFqekjYKevHM1nag4plt-22q-ekMlIh3p5vb1pm21rYvNGyoJvIvN8TLkwzds12tbrzXflryfbjmWbVm2ZTffUrmM0vHWqguV3bNDvx14bdvutm3fwTj_L6KLBjRtQAxPydNQonrq9-hDKL5AMvj2Tan7Js1evzwoYmrSHENx9H7ST9JRgsF5GeU1RMnR-jZSXRHyZR1pcrTeAulwvtwCTFWk_txDsORoTRVseHDGlsWQCZh4EqPhAjJeQNEFeHoHSjwgABfY3kEyONxO8xG9fdaly25FGn__BTWqSOPhBSSDe5diNW5eS-PCqDTRGEcl1HgB1VsgKxYwkzrU6BjcfAIlfiFW_UUkg4OrtMgplDh5xbKp1fE5a0WBH7Y6NLRaIeO85XlC2CGNuq7HVhqpaAGqayiWv6qhiOoosjoG4qRJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-B6U2AfPP_um-CiLndDrdhzLn9qHmdg1_eHc5IWcFwnXU_fuGeSFK_BwCXrh1EWW790Vbke6jHtTir7ahxZPQJuK1N7VGIryQMTa0eWhiHXB7HV21tktZ6npTelBanoyIaD5PnJRzlV2S98BNxuzSaTFLF0Gykw5o0yUMyUMQX7rsVC85VDebXWigLYo5azV5Y7kviPdoGPPI22Kcpqt_VW7_6dEX540Qxkt9ey6TtcNA08EoWABd0JmB1L4YQCtSihdXwk8URX54IffkKmK1J7fBKPH0PExuNoALWzQUQm6W2KSfL9Lk16PDqRu95TZLVhbpRBpicw0YG7XIA2Zxqfkwuy965d-XLlnExkk_5msP_C8RJaXuKl-IujFe9_tZEYN1IQu7XTNUCP_D6oe7DwCVxX536OXV75-5vIxePYxdPZ40izWWUU2738FnRKwbAOxIojl-VOUldD_OrPzeqo_RS9vgMWNGYvzxpzFefzFalxFrnT_WPGuyJVnX4BWJ82u41gWt51QhL4Xut1I-p7d6UjfdgNpuT6Mrm5-_dKv_wwAnl_aZnEEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 7\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ad13366a075b3cbec02608702a659630\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngxePAghBEGQFiQouLPdPd0908lFgj9O2Y1mJYKnqq7q2crWdHW6qmcmc9o14sHTHjx4EXrf7GYPQlAUctVZD4IgpG8LZi_-A4IgHmVmB1dSUN_3Vb3iq_fq1ecH1RnpoKKnt2_pqVSKrkcdz33jrsy5Hht3Y8v1vY53w70r8zi84U4WoRxd97thx3vTfV-kO3o98HzP8z3ffU-WItOT9SUKWTz2k6gThx3f73f8KMCkfH7HVA4MdcBHZ-QyJG9e-iP7BDKdIx9--44wO1YXb707rBS1usSIH3-U7-R6nGN4UWalgyw_Xp2GNg0hX7Wg8-OVCujR4UIFmGxI6-ozsPx4RRVsdHTOlimIHIy_iPFoDqHmkHSOVD-E5E8JkHJsbCIfPtrQ5Zg-OEfpAm1I---_IMcNaT-7gnz4-KaSE_eOVpWVOjeYZDXkZA45mKOoTmCnLcjxCVL7KST_jXitV5EPj27RqqSQvF7Kl9kc1DioFlM6qLIWqqKFIT91adLPWBKHNBFZL-Oe30tp1O0mvTAKsjiNUKV7kHwfabmLotzFjtyH4Q6MbYjzwS5GvD7iygSmfsSVqZi_ysEqd-uZtoMDeqTtQOQEtNxHyetDWdw3D5HaS7NpZvhMLwJltp5RxuuZ5JagvH_6uudTrxelbC2Lo2it5wfeGqNeuhZ7vV7IMsqDMDrMjK3qg2Jlu_PTnwI74tRNRBaGnPe7Qb-bxCGPE87iNEiYHwseJTGMrCFNa_k4U9mQj5_8jkI2xHn5Ghg9gVEnSOUl0MoHHdeg2zWm-ffbNB8M6FCYzkDa7Yp1pAbXNQrbhn3gQFhyoM7IldmHWzd_XJqaXd6CSH8lq4G0rFGUNe7JnwkGau-7zcLKoZzShct3LLXiBVD5dPMfpLIhV91vlt_t-u23kRa7MMV_nWbKFA259sMXMJqAFW0oSaDExVWU1TD_W7OL-sB8hkHZBlPtGVNl-5CpUn3ZEPHklWXPRdg7J2_kqdsPAs9L_SDhSRQm3X4motDv9UTkd2PhdSNY09z7-rVf_h0AGxWY4QgEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.372Z","timestamp":1788682696372,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngxePAghBEGQFiQouLPdPd0908lFgj9O2Y1mJYKnqq7q2crWdHW6qmcmc9o14sHTHjx4EXrf7GYPQlAUctVZD4IgpG8LZi_-A4IgHmVmB1dSUN_3Vb3iq_fq1ecH1RnpoKKnt2_pqVSKrkcdz33jrsy5Hht3Y8v1vY53w70r8zi84U4WoRxd97thx3vTfV-kO3o98HzP8z3ffU-WItOT9SUKWTz2k6gThx3f73f8KMCkfH7HVA4MdcBHZ-QyJG9e-iP7BDKdIx9--44wO1YXb707rBS1usSIH3-U7-R6nGN4UWalgyw_Xp2GNg0hX7Wg8-OVCujR4UIFmGxI6-ozsPx4RRVsdHTOlimIHIy_iPFoDqHmkHSOVD-E5E8JkHJsbCIfPtrQ5Zg-OEfpAm1I---_IMcNaT-7gnz4-KaSE_eOVpWVOjeYZDXkZA45mKOoTmCnLcjxCVL7KST_jXitV5EPj27RqqSQvF7Kl9kc1DioFlM6qLIWqqKFIT91adLPWBKHNBFZL-Oe30tp1O0mvTAKsjiNUKV7kHwfabmLotzFjtyH4Q6MbYjzwS5GvD7iygSmfsSVqZi_ysEqd-uZtoMDeqTtQOQEtNxHyetDWdw3D5HaS7NpZvhMLwJltp5RxuuZ5JagvH_6uudTrxelbC2Lo2it5wfeGqNeuhZ7vV7IMsqDMDrMjK3qg2Jlu_PTnwI74tRNRBaGnPe7Qb-bxCGPE87iNEiYHwseJTGMrCFNa_k4U9mQj5_8jkI2xHn5Ghg9gVEnSOUl0MoHHdeg2zWm-ffbNB8M6FCYzkDa7Yp1pAbXNQrbhn3gQFhyoM7IldmHWzd_XJqaXd6CSH8lq4G0rFGUNe7JnwkGau-7zcLKoZzShct3LLXiBVD5dPMfpLIhV91vlt_t-u23kRa7MMV_nWbKFA259sMXMJqAFW0oSaDExVWU1TD_W7OL-sB8hkHZBlPtGVNl-5CpUn3ZEPHklWXPRdg7J2_kqdsPAs9L_SDhSRQm3X4motDv9UTkd2PhdSNY09z7-rVf_h0AGxWY4QgEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3bed7a1dc9700ba3f407e9e068f491e8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/88/63/72/886372dced7c4cd5c2e4631aa05be1cb/1779810727.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.383Z","timestamp":1788682696383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/88/63/72/886372dced7c4cd5c2e4631aa05be1cb/1779810727.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50835\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 26 May 2026 15:52:07 GMT\r\netag: \"6a15c1a7-c693\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50835,"size_decoded":51183,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=240, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x240, components 3","md5":"0b489a096f3b8e6859b82cbbecdc855e","sha1":"cec6cf1f702fd79ad8316db23eef3eac54654a8e","sha256":"8cb53710710ebc7ee91535147e5002bf4d9a97f8fa9898708c92cb4229737f53","sha512":"c5f3ae318e946770ecaf694fffc08d4ba1a054ffc19f7e7e61f753f4562315633787415bba10188e0f18b14c165da6a6a0c3f072ce468af95c76b77eaa1a00cb","ssdeep":"768:PhibUvEiGibUvn7YyrwX7Rh1feFz9viANuNPH2n4wls96a:s7IXtzPAGsj6t","tlshash":"2033e135d3569e21f9e1bb3861d5fbb387127d68b7a31a06bd8c25023b303ca5e2d241","first_seen":"2026-05-28T19:13:43.960376Z","last_seen":"2026-09-21T12:38:50.796059Z","times_seen":116,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":28,"dns":0,"connect":19,"send":0,"wait":64,"receive":22,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz2skRRitnh29eBBkEU_SgoiCmXT3dPdMmz0t_jjIJupGVvBUP7omtenp6nRVz8zOKeuK5xwUvAidN8nmtige9qoTEUEQtm8BNx78BwRBPHiQmQxGtqC-76v6ilfv1avPDqtz0kFFz967oacqy-h61PHcV2-pXOixcTe3Xd_reBvuLZXH4YY7WYRy9IbfDTvea-47Kd_V64Hne57v-e7bqkylnqwvu1DFAz-JOnHY8f1-x48CTMond0zlwFAHYnROnoMSzbO_y4-h-Bz58Os3U7NrdfH6W8Mqo1aXGImTD_PdXI9zDC9LWTqQ-cnqNLRpCPmyBZ2frFRAj44WKsBUQ1rPPwbLT1ZUwUbHF2xZhjQHE89gPJojzeZQdA6u70GJRwTgAptbyIf3N3U5pncuunTRbUj7rz-hxg1pP76KfPjgeqYm7k2dVVbp3GAia6jJHGowR1Gdwk5bUONTcPsJlPiFeK0XkQ-Pb9CqpFCiXspXcg5qHFSLqRxUsoWqaGEozlya9CVL4pAmqexJ4fk9TqNuN-mFUSBjHqHid6HEAXi5j6Lcx646gBEOjG2I8_4-RqI-FpkJTH1fZKZi_ioHq9ytZ9oODumxtoM0J6DlAUpRH6liz9wDt1dmU2nETC8CZbaeUSbqmRKWoNw7e9nzqdeLOFuTca-_1vODYI15AV-jgksa9aOYMXokja3qw2Jlu_P9Hyl20zM3SWUYCtHvBv1uEociTgSLeZAwP05FlMQwqoYyreXjTFVDPnr4KwrVEOeFV8DoKUx2Cq6ugFY-6LgG3akxzb_doflgQIep6QyU3alYR2kIXaOwbdg7DlJLDrNzcnX2wfb175ambjR7SPnPZDXAyxpFWeO2-oFgkN39ZquwaqimdOHyTUtt-jSoerT1N7hqyFP_fLH8bq5_DbzYhyn-Q5plpmhI-vBdGE3AijYyRZCll1dRVsP8b80u60PzKQZlGyxrz1hWto9YVmafL-C2l5gNufbbjxfkjTpzPRGmPk9o1JNpFEUsCgMuJfN6gex2g34Ca5rbX730078DAP9hjWgIBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.404Z","timestamp":1788682696404,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz2skRRitnh29eBBkEU_SgoiCmXT3dPdMmz0t_jjIJupGVvBUP7omtenp6nRVz8zOKeuK5xwUvAidN8nmtige9qoTEUEQtm8BNx78BwRBPHiQmQxGtqC-76v6ilfv1avPDqtz0kFFz967oacqy-h61PHcV2-pXOixcTe3Xd_reBvuLZXH4YY7WYRy9IbfDTvea-47Kd_V64Hne57v-e7bqkylnqwvu1DFAz-JOnHY8f1-x48CTMond0zlwFAHYnROnoMSzbO_y4-h-Bz58Os3U7NrdfH6W8Mqo1aXGImTD_PdXI9zDC9LWTqQ-cnqNLRpCPmyBZ2frFRAj44WKsBUQ1rPPwbLT1ZUwUbHF2xZhjQHE89gPJojzeZQdA6u70GJRwTgAptbyIf3N3U5pncuunTRbUj7rz-hxg1pP76KfPjgeqYm7k2dVVbp3GAia6jJHGowR1Gdwk5bUONTcPsJlPiFeK0XkQ-Pb9CqpFCiXspXcg5qHFSLqRxUsoWqaGEozlya9CVL4pAmqexJ4fk9TqNuN-mFUSBjHqHid6HEAXi5j6Lcx646gBEOjG2I8_4-RqI-FpkJTH1fZKZi_ioHq9ytZ9oODumxtoM0J6DlAUpRH6liz9wDt1dmU2nETC8CZbaeUSbqmRKWoNw7e9nzqdeLOFuTca-_1vODYI15AV-jgksa9aOYMXokja3qw2Jlu_P9Hyl20zM3SWUYCtHvBv1uEociTgSLeZAwP05FlMQwqoYyreXjTFVDPnr4KwrVEOeFV8DoKUx2Cq6ugFY-6LgG3akxzb_doflgQIep6QyU3alYR2kIXaOwbdg7DlJLDrNzcnX2wfb175ambjR7SPnPZDXAyxpFWeO2-oFgkN39ZquwaqimdOHyTUtt-jSoerT1N7hqyFP_fLH8bq5_DbzYhyn-Q5plpmhI-vBdGE3AijYyRZCll1dRVsP8b80u60PzKQZlGyxrz1hWto9YVmafL-C2l5gNufbbjxfkjTpzPRGmPk9o1JNpFEUsCgMuJfN6gex2g34Ca5rbX730078DAP9hjWgIBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 44714de8f0cd054983af0054f12468f3\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSy4sc1Re-3dO_nwsXgoTgSloQUbA79a6uZBd8bMyMmkgEF3Jf1XPT1VWVure6O73RSXxsZ-HCjVD9dc9MFhIUF261RxARhNRuwMwm_4AgiEvpnsYJXrjnnHvO4dzvfHyfzcpT0kVJT96-lk1VktBLftdqv3xTpSIb6_b2jbZtda0r7ZsqDbwr7cnKFKPLtut1rVfab0o-yC45lm1ZtmW331CFjLPJpXUVKn9gR3438Lq23evavoNJ8d-MLreg6RbE6JQ8CyXqZx7HH0DxJdLhN69JPTBZ_urrwzKhJiswEkfvpYM0G6cYnodx0UCcHm26kemakC-byNKjzRbIRovVFmCqJs2Lj8DSow1UsNHBGVqWQKZg4mmMR0vIZAlFl-DZPSjxkABcYHsH6fBwOyvG9M5Zla6qNWn99SfUuCatRxeQDh9cTdSkfT1LSqOyVGMSV1CTJVR_ibxcwkybUONjcHMXSvxGrObzSIcH12hZUChx8qJlUyv0OevEgR91QhpZnYhx3vE8IeyIxj3XY2uOVLwE1Q2Uq6saKOMmyryJoThp06gXsyjwaCTjMBaWHXLqu24Uer4TB9xHyfegxD548emiTLmeOfdzsWsGIy9amKKUh6ukF82cr8sP88SJvF7oWP7MPjzrWvcgL_buCzeULuPejGKg9qHF_6BNTRrvfISRqA5Eoh1dHYpEl8zeeGfj3Wqemf6MHmSmL1MCWuyjENVC5bf1PXCzNZ_GWsyzlaHMVHPKRDVXwhAUt58kiopeJ6SMdXpxKDqxDGPXE6wnY2cRa1NWs3yjr8aPf0gM5Ek7kvGKz57r9Nwo8EQQCRZwJ2J2IIUfBdCqgtLNNcFTVZP3v_8duapJ47mXwOgxdHIMrrZASxt0XIHuVpim3-3StN-nQ6m7fWV2S9ZVGURWITctmDsNSENmySm5MH_3xtUf1uqRj0eQ_FeyOeBFhbyocEv9RNBP9r7dyY0aqildyem6oUb-H1Q93PkbXNXk4lN317q-HLTA84-h838nzROd1-Qt9Tl0RsDyLSSKIJHnX1FWQT_xZufxTH-CftECS1pzlhStBUuK5Iv1uJrI04M17lX0M7Q6afccx7K47UQi8r3I7cXS9-wwlL7tBtJyfRhd3_rqhV_-GQDLtWK7cQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.501Z","timestamp":1788682697501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSy4sc1Re-3dO_nwsXgoTgSloQUbA79a6uZBd8bMyMmkgEF3Jf1XPT1VWVure6O73RSXxsZ-HCjVD9dc9MFhIUF261RxARhNRuwMwm_4AgiEvpnsYJXrjnnHvO4dzvfHyfzcpT0kVJT96-lk1VktBLftdqv3xTpSIb6_b2jbZtda0r7ZsqDbwr7cnKFKPLtut1rVfab0o-yC45lm1ZtmW331CFjLPJpXUVKn9gR3438Lq23evavoNJ8d-MLreg6RbE6JQ8CyXqZx7HH0DxJdLhN69JPTBZ_urrwzKhJiswEkfvpYM0G6cYnodx0UCcHm26kemakC-byNKjzRbIRovVFmCqJs2Lj8DSow1UsNHBGVqWQKZg4mmMR0vIZAlFl-DZPSjxkABcYHsH6fBwOyvG9M5Zla6qNWn99SfUuCatRxeQDh9cTdSkfT1LSqOyVGMSV1CTJVR_ibxcwkybUONjcHMXSvxGrObzSIcH12hZUChx8qJlUyv0OevEgR91QhpZnYhx3vE8IeyIxj3XY2uOVLwE1Q2Uq6saKOMmyryJoThp06gXsyjwaCTjMBaWHXLqu24Uer4TB9xHyfegxD548emiTLmeOfdzsWsGIy9amKKUh6ukF82cr8sP88SJvF7oWP7MPjzrWvcgL_buCzeULuPejGKg9qHF_6BNTRrvfISRqA5Eoh1dHYpEl8zeeGfj3Wqemf6MHmSmL1MCWuyjENVC5bf1PXCzNZ_GWsyzlaHMVHPKRDVXwhAUt58kiopeJ6SMdXpxKDqxDGPXE6wnY2cRa1NWs3yjr8aPf0gM5Ek7kvGKz57r9Nwo8EQQCRZwJ2J2IIUfBdCqgtLNNcFTVZP3v_8duapJ47mXwOgxdHIMrrZASxt0XIHuVpim3-3StN-nQ6m7fWV2S9ZVGURWITctmDsNSENmySm5MH_3xtUf1uqRj0eQ_FeyOeBFhbyocEv9RNBP9r7dyY0aqildyem6oUb-H1Q93PkbXNXk4lN317q-HLTA84-h838nzROd1-Qt9Tl0RsDyLSSKIJHnX1FWQT_xZufxTH-CftECS1pzlhStBUuK5Iv1uJrI04M17lX0M7Q6afccx7K47UQi8r3I7cXS9-wwlL7tBtJyfRhd3_rqhV_-GQDLtWK7cQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 7\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e6daff0dec5927327d3a22dab1f2b6dd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcGe7e7p7prOegj8Okl01KxFyqh9ds5Xt6ertqp6ZzGljxKPswYMXoffNbvYWFA-56qyIIAjp24JZD_4DgiAeZSaDKymo7_uqXvHVe_Xq88PqnHRQ0bMPruupyjK6HnU89_WbKhd6bNzNbdf3Ot6Ge1PlcbjhThahHF31u2HHe8N9L-W7ej3wfM_zPd99V5Wp1JP1JQpVPPCTqBOHHd_vd_wowKR8esdUDgx1IEbn5AUo0Tz_h7wFxefIh9-8nZpdq4s33xlWGbW6xEicfJzv5nqcY3hRytKBzE9Wp6FNQ8hXLej8ZKUCenS0UAGmGtK68hgsP1lRBRsdP2HLMqQ5mHgO49EcaTaHonNwfQ9KPCIAF9jcQj68v6nLMb3zBKULtCHtv_-CGjek_fgy8uGDa5mauDd0Vlmlc4OJrKEmc6jBHEV1CjttQY1Pwe2nUOJX4rVeRj48vk6rkkKJeilfyTmocVAtpnJQyRaqooWhOHNp0pcsiUOapLInhef3OI263aQXRoGMeYSK34USB-DlPopyH7vqAEY4MLYhzof7GIn6WGQmMPV9kZmK-ascrHK3nmk7OKTH2g7SnICWByhFfaSKPXMP3F6aTaURM70IlNl6RpmoZ0pYgnLv7FXPp14v4mxNxr3-Ws8PgjXmBXyNCi5p1I9ixuiRNLaqD4uV7c4Pf6bYTc_cJJVhKES_G_S7SRyKOBEs5kHC_DgVURLDqBrKtJaPM1UN-eThbyhUQ5wXXwOjpzDZKbi6BFr5oOMadKfGNP9uh-aDAR2mpjNQdqdiHaUhdI3CtmHvOEgtOczOyeXZR9vXvl-amj7cRsp_IasBXtYoyhq31Y8Eg-zut1uFVUM1pQuXb1hq02dA1aOtf8BVQ648-8Xyu1196RZ4sQ9T_NdplpmiIW_9_hOMJmCFg0wRZOnFVZTVMP9bs4v60HyGQdkGy9ozlpXtI5aV2ZdLtovw_rJxQzaaPRh15noiTH2e0Kgn0yiKWBQGXErm9QLZ7Qb9BNY0t79-5ed_BwAlPrToCAQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.400Z","timestamp":1788682696400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcGe7e7p7prOegj8Okl01KxFyqh9ds5Xt6ertqp6ZzGljxKPswYMXoffNbvYWFA-56qyIIAjp24JZD_4DgiAeZSaDKymo7_uqXvHVe_Xq88PqnHRQ0bMPruupyjK6HnU89_WbKhd6bNzNbdf3Ot6Ge1PlcbjhThahHF31u2HHe8N9L-W7ej3wfM_zPd99V5Wp1JP1JQpVPPCTqBOHHd_vd_wowKR8esdUDgx1IEbn5AUo0Tz_h7wFxefIh9-8nZpdq4s33xlWGbW6xEicfJzv5nqcY3hRytKBzE9Wp6FNQ8hXLej8ZKUCenS0UAGmGtK68hgsP1lRBRsdP2HLMqQ5mHgO49EcaTaHonNwfQ9KPCIAF9jcQj68v6nLMb3zBKULtCHtv_-CGjek_fgy8uGDa5mauDd0Vlmlc4OJrKEmc6jBHEV1CjttQY1Pwe2nUOJX4rVeRj48vk6rkkKJeilfyTmocVAtpnJQyRaqooWhOHNp0pcsiUOapLInhef3OI263aQXRoGMeYSK34USB-DlPopyH7vqAEY4MLYhzof7GIn6WGQmMPV9kZmK-ascrHK3nmk7OKTH2g7SnICWByhFfaSKPXMP3F6aTaURM70IlNl6RpmoZ0pYgnLv7FXPp14v4mxNxr3-Ws8PgjXmBXyNCi5p1I9ixuiRNLaqD4uV7c4Pf6bYTc_cJJVhKES_G_S7SRyKOBEs5kHC_DgVURLDqBrKtJaPM1UN-eThbyhUQ5wXXwOjpzDZKbi6BFr5oOMadKfGNP9uh-aDAR2mpjNQdqdiHaUhdI3CtmHvOEgtOczOyeXZR9vXvl-amj7cRsp_IasBXtYoyhq31Y8Eg-zut1uFVUM1pQuXb1hq02dA1aOtf8BVQ648-8Xyu1196RZ4sQ9T_NdplpmiIW_9_hOMJmCFg0wRZOnFVZTVMP9bs4v60HyGQdkGy9ozlpXtI5aV2ZdLtovw_rJxQzaaPRh15noiTH2e0Kgn0yiKWBQGXErm9QLZ7Qb9BNY0t79-5ed_BwAlPrToCAQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 59f36b75f7140feb76bd6060bbb1d17e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMggoKs4kEkgiwqJtP_Sbu3xZ_L7oy6Kyt4kPrrTE063b1d1Uk2J8dVb8IcPIggdL5kZlaQRRH06ma8CcI2iAy4cxE8C4J4lGTCjlhQ7736XlH1vY_v42lxQtoo6PEbV9KJimO64bet5vPXVSLSkW5uXmvaVtu62LyuksC72BwvQz582Xa9tvVC83XJ--mGY9mWZVt28zWVyygdb6y6UNkdO_Tbgde27W7b9h2M8_8jumhA0wbE8IQ8DiWqx36P3oXiCySDr1-Rum_S7KVXB0VMTZpjKA7fTvpJOkowOCujvIYoOVzfRqorQj6rI00O11MgHc6XU4CpitSfvA-WHK6pgg33T9myGDIBE49gNFxAxgsougBPb0GJewTgAptbSAYHm2k-ojdPu3TZrUjj77-gRhVp3D-PZHDnUqzGzatpXBiVJhrjqIQaL6B6C2TFAmZShxodgZsPoMTPxKo_g2Swf4UWOYUSx89ZNrU6PmetKPDDVoeGVitknLc8Twg7pFHX9dhKIxUtQHUNxXKrGoqojiKrYyCOmzTsRiwMPBrKqBMJy-5w6rtu2PF8Jwq4j4LvQok98Pyjr4r3stgJvW7HsfypfZCJbdMfzk1eyHmRcD11b59CXrgCD5agF05dZPnubeF2pMu4N6Xoqz1o8TC0qUjtTY2hKPdFrB1dHohYF8xeZ2ed3XKWmt6U7qemJxMCmu8hF-VcZTf0LXBzbjaJtJily0CZKWeUiXKmhCHIbzwQirccyrutThTQFqWctbrckdx3pBt07HmkTVFOs7W_anf_lOjL42Yoo6WeXdfpumHgiSAULOBOyOxACj8MoFUJpesrgSeqIu98_xsyVZHaUxfA6BF0fASuzoEWNuioBN0uMUm-3aZJr0cHUrd7ymwXrK1SiLREZhowN2uQhkzjE3J-9ta1Sz-s3HP5iach-U9kvcDzElleYkf9SNCLd7_ZyowaqAld2umqoUY-BKrubf0Driry6K_frXz94s4n4Nn70NmDl2axzioiT76ETglY1kCsCGJ59hVlJfR_zuysnuoP0csbYHFjxuK8MWdxHn9akQt3P6_I5e4fFbmA7JS8VsfNruNYFredUIS-F7rdSPqe3elI33YDabk-jK52vnj2l38HADMa685xBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.772Z","timestamp":1788682709772,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMggoKs4kEkgiwqJtP_Sbu3xZ_L7oy6Kyt4kPrrTE063b1d1Uk2J8dVb8IcPIggdL5kZlaQRRH06ma8CcI2iAy4cxE8C4J4lGTCjlhQ7736XlH1vY_v42lxQtoo6PEbV9KJimO64bet5vPXVSLSkW5uXmvaVtu62LyuksC72BwvQz582Xa9tvVC83XJ--mGY9mWZVt28zWVyygdb6y6UNkdO_Tbgde27W7b9h2M8_8jumhA0wbE8IQ8DiWqx36P3oXiCySDr1-Rum_S7KVXB0VMTZpjKA7fTvpJOkowOCujvIYoOVzfRqorQj6rI00O11MgHc6XU4CpitSfvA-WHK6pgg33T9myGDIBE49gNFxAxgsougBPb0GJewTgAptbSAYHm2k-ojdPu3TZrUjj77-gRhVp3D-PZHDnUqzGzatpXBiVJhrjqIQaL6B6C2TFAmZShxodgZsPoMTPxKo_g2Swf4UWOYUSx89ZNrU6PmetKPDDVoeGVitknLc8Twg7pFHX9dhKIxUtQHUNxXKrGoqojiKrYyCOmzTsRiwMPBrKqBMJy-5w6rtu2PF8Jwq4j4LvQok98Pyjr4r3stgJvW7HsfypfZCJbdMfzk1eyHmRcD11b59CXrgCD5agF05dZPnubeF2pMu4N6Xoqz1o8TC0qUjtTY2hKPdFrB1dHohYF8xeZ2ed3XKWmt6U7qemJxMCmu8hF-VcZTf0LXBzbjaJtJily0CZKWeUiXKmhCHIbzwQirccyrutThTQFqWctbrckdx3pBt07HmkTVFOs7W_anf_lOjL42Yoo6WeXdfpumHgiSAULOBOyOxACj8MoFUJpesrgSeqIu98_xsyVZHaUxfA6BF0fASuzoEWNuioBN0uMUm-3aZJr0cHUrd7ymwXrK1SiLREZhowN2uQhkzjE3J-9ta1Sz-s3HP5iach-U9kvcDzElleYkf9SNCLd7_ZyowaqAld2umqoUY-BKrubf0Driry6K_frXz94s4n4Nn70NmDl2axzioiT76ETglY1kCsCGJ59hVlJfR_zuysnuoP0csbYHFjxuK8MWdxHn9akQt3P6_I5e4fFbmA7JS8VsfNruNYFredUIS-F7rdSPqe3elI33YDabk-jK52vnj2l38HADMa685xBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e5ee3a0a80402eb5f0f787ff3fcd4825\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/sbar.json?key=8888a19c6a1141f12aba002c4984b9b9\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:20.562Z","timestamp":1788682700562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /sbar.json?key=8888a19c6a1141f12aba002c4984b9b9\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl29487207=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:20 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:20 GMT; Secure; SameSite=None\nuncs=2; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None\nu_pl31019776=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None\nslec8888a19c6a1141f12aba002c4984b9b9=[6790255]; Path=/; Expires=Sun, 06 Sep 2026 08:18:25 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 230\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dad3dfd73564f0a5e9c4b47d620edaba\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-769f-a3d2-d85d0b523e60:2:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:20Z","raw_expires":"Sun, 13 Sep 2026 08:18:20 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:20 GMT; Secure; SameSite=None"},{"name":"uncs","value":"2","quoted":false,"path":"/","expires":"2026-09-07T08:18:20Z","raw_expires":"Mon, 07 Sep 2026 08:18:20 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=2; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None"},{"name":"pdhtkv29","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:20Z","raw_expires":"Mon, 07 Sep 2026 08:18:20 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv29=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:20Z","raw_expires":"Mon, 07 Sep 2026 08:18:20 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None"},{"name":"u_pl31019776","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:20Z","raw_expires":"Mon, 07 Sep 2026 08:18:20 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl31019776=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:20 GMT; Secure; SameSite=None"},{"name":"slec8888a19c6a1141f12aba002c4984b9b9","value":"[6790255]","quoted":false,"path":"/","expires":"2026-09-06T08:18:25Z","raw_expires":"Sun, 06 Sep 2026 08:18:25 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"slec8888a19c6a1141f12aba002c4984b9b9=[6790255]; Path=/; Expires=Sun, 06 Sep 2026 08:18:25 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5961,"size_decoded":5837,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"b35d135294270e012a6e0c9e2c566e46","sha1":"c55a5eeec1f2559f4c927937f79c90b4727af13b","sha256":"fa7e9b95ed21b2193d41851363b2411d062ce156e852f36f8c3ac8423290a609","sha512":"6dd0de28263768d80dd93bd617c3c464a5501aaa72971c37aea53f80419545422a3ee7c165723008567693acd67cdef251e3d7abcd5a3b50392b9981375d4f6a","ssdeep":"96:9zeXk/bwyW7uCJ/JXHuJ4R08wFyW7dTYs/esNBX9o43oLjWhMUKH6Vvx3JoTOgMK:9zeXyMyWyM/JF08wFyWpYs/PNU4biH6Y","tlshash":"78c15d3b22ee4889dd364c4d29ce68fe0c928c5748986a58c86ff3ed4d97445829787e","first_seen":"2026-09-06T08:18:49.308223Z","last_seen":"2026-09-06T08:18:49.308223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/css/style.css","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.615Z","timestamp":1788682704615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/css/style.css HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 08:18:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65aa8501-14cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2Bib1ZItlFnhRXc9mr9Bik50X2WAGH57KFcd3mSPSIEtrdRvY6FfdD2LTec%2FoYN5TauJzM9yuvJtf26Mip5legl7TCURjyR8B9gbharxqUMVEmWKFd9v1CoVoVZn7N6XVDuCMqcJTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36c0af7ee357131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5327,"size_decoded":2214,"mime_type":"text/css","magic":"ASCII text","md5":"c1ba26c5d5aeee6feba13f9253a66396","sha1":"2ef869fb563e89f964da9532d1811ad2048ecc00","sha256":"ceef88fed1e8d5e933b022877eee627f6bcd3be66a6bbab443ca253b8de49940","sha512":"899a7c86c9851f33f515acfed24931e0146864570bae6e66d3f764bc4e86593dda381d36ab1cec83fd1f6ef9cd20eaa30186eff621f6389f383de3578a792353","ssdeep":"96:C7YnTMXQ7GxQ8IBkHhnF9iQpmJxMX5OiwUF9gNAxcNMHwAhvFQ3FS9yFnYFBSaFR:nTMXQsikHhnFUJxMX5eCgNAx6qDhve9+","tlshash":"beb1ae9a26bb2500b806e47e3b66271723148007e64bdd253fc17658cfc63a5dee278f","first_seen":"2024-01-26T18:53:03Z","last_seen":"2026-09-22T18:31:49.666637Z","times_seen":1130,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.149Z","timestamp":1788682694149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164917\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-23T03:00:38.047576Z","times_seen":55711,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":35,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz2skRRitngxe9iDIIh5EWhBRMJPunu6eaeNp8cdBNlE3soIHqR9dk9r0dHW6qmdm55R1xXMOHrwInTfJ5rYoHvaqExFBELYPQsCNh_0HBEE8yswORiyo7_uqXvHVe_Xq86PqgnRQ0fP3ruupyjK6EXU895WbKhd6bNytHdf3Ot6me1PlcbjpThahHL3ud8OO96r7Tsr39Ebg-Z7ne777tipTqScbSxSquO8nUScOO77f7_hRgEn5_x1TOTDUgRhdkGegRPP0Y_kxFJ8jH379Zmr2rC5ee2tYZdTqEiNx-mG-l-txjuFlKUsHMj9dnYY2DSFftqDz05UK6NHxQgWYakjr2Udg-emKKtjo5AlbliHNwcQVjEdzpNkcis7B9V0o8ZAAXGBrG_nw3pYux_T2E5Qu0Ia0__oTatyQ9qOryIf3r2Vq4t7QWWWVzg0msoaazKEGcxTVGey0BTU-A7efQolfiNd6Afnw5DqtSgol6qV8JeegxkG1mMpBJVuoihaG4tylSV-yJA5pksqeFJ7f4zTqdpNeGAUy5hEqfgdKHIKXByjKA-ypQxjhwNiGOO8fYCTqE5GZwNT3RGYq5q9ysMrdeqbt4IieaDtIcwJaHqIU9bEq9s1dcLs2m0ojZnoRKLP1jDJRz5SwBOX--UueT71exNm6jHv99Z4fBOvMC_g6FVzSqB_FjNFjaWxVHxUr253v_0ixl567SSrDUIh-N-h3kzgUcSJYzIOE-XEqoiSGUTWUaS0fZ6oa8tGD31CohjjPvQxGz2CyM3C1Blr5oOMadLfGNP92l-aDAR2mpjNQdrdiHaUhdI3CtmFvO0gtOcouyNXZBzvXvlua-sbvPyLlP5PVAC9rFGWNW-oHgkF255vtwqqhmtKFyzcstelToOrh9t_gqiFXnn-8_G7ur5-AFwcwxb-dZpkpGrLZ7MNoAlasIVMEWXp5FWU1zH_W7LI-Mp9hULbBsvaMZWX7mGVl9kVD0gc7i_Dukvequzp3PRGmPk9o1JNpFEUsCgMuJfN6gex2g34Ca5pbX7340z8DAFn2l4IIBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.403Z","timestamp":1788682696403,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz2skRRitngxe9iDIIh5EWhBRMJPunu6eaeNp8cdBNlE3soIHqR9dk9r0dHW6qmdm55R1xXMOHrwInTfJ5rYoHvaqExFBELYPQsCNh_0HBEE8yswORiyo7_uqXvHVe_Xq86PqgnRQ0fP3ruupyjK6EXU895WbKhd6bNytHdf3Ot6me1PlcbjpThahHL3ud8OO96r7Tsr39Ebg-Z7ne777tipTqScbSxSquO8nUScOO77f7_hRgEn5_x1TOTDUgRhdkGegRPP0Y_kxFJ8jH379Zmr2rC5ee2tYZdTqEiNx-mG-l-txjuFlKUsHMj9dnYY2DSFftqDz05UK6NHxQgWYakjr2Udg-emKKtjo5AlbliHNwcQVjEdzpNkcis7B9V0o8ZAAXGBrG_nw3pYux_T2E5Qu0Ia0__oTatyQ9qOryIf3r2Vq4t7QWWWVzg0msoaazKEGcxTVGey0BTU-A7efQolfiNd6Afnw5DqtSgol6qV8JeegxkG1mMpBJVuoihaG4tylSV-yJA5pksqeFJ7f4zTqdpNeGAUy5hEqfgdKHIKXByjKA-ypQxjhwNiGOO8fYCTqE5GZwNT3RGYq5q9ysMrdeqbt4IieaDtIcwJaHqIU9bEq9s1dcLs2m0ojZnoRKLP1jDJRz5SwBOX--UueT71exNm6jHv99Z4fBOvMC_g6FVzSqB_FjNFjaWxVHxUr253v_0ixl567SSrDUIh-N-h3kzgUcSJYzIOE-XEqoiSGUTWUaS0fZ6oa8tGD31CohjjPvQxGz2CyM3C1Blr5oOMadLfGNP92l-aDAR2mpjNQdrdiHaUhdI3CtmFvO0gtOcouyNXZBzvXvlua-sbvPyLlP5PVAC9rFGWNW-oHgkF255vtwqqhmtKFyzcstelToOrh9t_gqiFXnn-8_G7ur5-AFwcwxb-dZpkpGrLZ7MNoAlasIVMEWXp5FWU1zH_W7LI-Mp9hULbBsvaMZWX7mGVl9kVD0gc7i_Dukvequzp3PRGmPk9o1JNpFEUsCgMuJfN6gex2g34Ca5pbX7340z8DAFn2l4IIBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dceea4ebcf9d830e697b3cf1a41e3056\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/2a362e5cae20c33eeea29a03144bdf06/invoke.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.226Z","timestamp":1788682697226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"levitydinerdowny.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 00:38:22 GMT","end":"Fri, 06 Nov 2026 00:38:21 GMT"},"fingerprint":{"sha1":"8F:C8:EC:66:A9:2C:C4:C9:BC:54:1A:99:9D:0E:65:9D:CB:CE:5A:E9","sha256":"E1:54:D3:ED:AE:BB:39:C4:9D:8C:81:DD:F8:62:A6:1D:A4:48:E2:3C:A4:D2:ED:09:DB:A4:3A:7B:9C:5F:9C:3D"}}},"request":{"raw":"GET /2a362e5cae20c33eeea29a03144bdf06/invoke.js HTTP/1.1\r\nHost: levitydinerdowny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pip_8f26c41cec9b382d7b940db003223fde=1; pip_5968a976363b7c9ef2324b6a7fba9a55=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: levitydinerdowny.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e3125f8e6f597b7b033b013fd5646a49\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48992,"size_decoded":21305,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48992), with no line terminators","md5":"6444fce7a505013c2fd43af8ff2d51b7","sha1":"70cc55ae9b6427c17c231fc3df7487b316116fe2","sha256":"2a2ba0859f87ffbc75d7308e67c2df95410250c5d352d590c5a73df3c0d02b78","sha512":"e0038710fe15c02caa9be650804ec9ad8df515726466b58199a4a6acf2b9b34c3c654249cbc32706a1b14fd3fcaaa6c72118445683e4ac16a9ce5c7bd43f3464","ssdeep":"768:5Zci1XerBzdkgAp8PIzvm6epOQQ/i3hN1xQ3L6gGh5XhVEZMRnjTWuVq5Amzy3i4:0i1uDP68dyZUTBqVyWXfIHJ6myF8ZjS8","tlshash":"f923f9cb7f90906413b1a9f3732ba939e549dd15b58cd4c8f07d28886f63362ec76628","first_seen":"2026-09-05T03:34:02.212813Z","last_seen":"2026-09-07T06:01:51.616083Z","times_seen":13,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"levitydinerdowny.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/img/number.png","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.625Z","timestamp":1788682705625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/img/number.png HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 08:18:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=4,i\r\netag: \"65aa8501-472\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 486399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o2zH%2Blrp%2BSsJREzCgrjraAoNO%2Fd5b4gcCZWZDOycXPeLRvxmDoEIQ83WVIe3LKrQj5itLBf%2B5gzhBVKUL9gsvGEe3UI5pxhUMSGQyKKav9PG05FTtKnjVSi2BYLRWOcEjSgk6%2F4g1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36c0afe2e717131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1138,"size_decoded":1972,"mime_type":"image/png","magic":"PNG image data, 43 x 43, 8-bit/color RGBA, non-interlaced","md5":"9e4414e85c588bf7db195e49c02ab2bb","sha1":"09254e79b255f1b2dfe45adbbe44583a4b433782","sha256":"0b977ec6e7cf5d35df03cd3a8041f5f523f5d4059ac67c152c0a7b613e20b762","sha512":"07925dc4d8f6cc1b9b89d26f2c3a6aa3175279719a0999fd837a20e8b12f443eb521e23b3212227ac1b6dfa2ecfcdd94b7494dd67d9d8b046efdddd185bb9bfc","ssdeep":"","tlshash":"a121f90aeca21be0d7888f0214dc135095da07447f8e280a37b6aa599e1070614451fb","first_seen":"2023-04-09T12:43:14Z","last_seen":"2026-09-22T18:31:49.692574Z","times_seen":4402,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/3f/0b/97/3f0b97cb8cb1f7cecdcc17c95a50fde8/1707820670.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.762Z","timestamp":1788682709762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/3f/0b/97/3f0b97cb8cb1f7cecdcc17c95a50fde8/1707820670.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 129599\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 13 Feb 2024 10:37:59 GMT\r\netag: \"65cb4687-1fa3f\"\r\nexpires: Tue, 08 Sep 2026 08:18:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129599,"size_decoded":129948,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"a2e994f67ebce0a74975f413f25646dd","sha1":"51f0837a80b3298d36ad1ced68a130915de39c3c","sha256":"9fe495ad47287f21b1f94be2283b8128f97cbc3a1535da5437d06f21e9b51f96","sha512":"1379964d18d84127d8cc54d706bbd9cce59eb8237950b8fc3505241c81c338935cbb34c2dd0dd3764dedcac5d005a63275b941088696c68aa0714463794bdb48","ssdeep":"3072:J94xKV9/1EcApXHtTjv9O21NI361VMkTtlO6SXTp7ExY:JoK3/1tAVHdFO21NI3sBTtIDpAxY","tlshash":"5bc312a4a34e40ebcef65740b10059a85fc81b5db630e1b4dedc12d31de69adb8c16f9","first_seen":"2024-02-14T23:19:34Z","last_seen":"2026-09-21T06:32:51.002296Z","times_seen":174,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSzYsc1Rd93Wl-v4ULQUJwIdKCiKLdqe_qSnbBj00yIyYSwYW-r-p509VVlXqvuju9chJ1PYILN0L16Z6ZLCQoLrLVHheCIKR2A2Y2_gOCIC6lexpHLah773v3cN-5h_PprDwlXZT05O0b2VQlCb3sd632y7dVKrKxbm_dattW17ravq3SwLvanqxCMbpiu17XeqX9luSD7LJj2ZZlW3b7TVXIOJtcXneh8od25HcDr2vbva7tO5gU_73RZROaNiFGp-QZKFE__Wv8PhRfIh1-_brUA5Plr70xLBNqsgIjcfRuOkizcYrheRkXDcTp0QaNTNeEfNFElh5ttkA2Wqy2AFM1aV56ApYebaiCjQ7O2LIEMgUTT2E8WkImSyi6BM_uQ4nHBOACW9tIh4dbWTGmd8-6dNWtSeuP36HGNWk9uYh0-PBaoibtm1lSGpWlGpO4gposofpL5OUSZtqEGh-Dm3tQ4mdiNZ9HOjy4QcuCQomTFy2bWqHPWScO_KgT0sjqRIzzjucJYUc07rkeW2uk4iWobqBc_aqBMm6izJsYipM2jXoxiwKPRjIOY2HZIae-60ah5ztxwH2UfA9K7IMXnzzIxY4ZjLxoYYpSHpYp1140s78qP8gTJ_J6oWP5M_vwDLXGLFaYmY282Hsg3FC6jHszioHahxYNaEMwEtWBSLSjq0OR6JLZm-xsslvNM9Of0YPM9GVKQIt9FKJaqPyOvg9uLsynsRbzbBUoM9WcMlHNlTAExZ1_iUSdThhYTqcnvbjjxXEUOqEdCiEWsTZlNcs33mp8_5vEQJ60IxmvtOy5Ts-NAk8EkWABdyJmB1L4UQCtKijdXIs7VTV579EvyFVNGs--BEaPoZNjcHUBtLRBxxXoToVp-u0OTft9OpS621dmp2RdlUFkFXLTgrnbgDRklpySi_N3bl37bu0c-egSJP-JbD7wokJeVNhVPxD0k71vtnOjhmpKV1a6aaiR_wNVj7f_BFc1ufT_e2tPX3nuVfD8I-j870nzROc1ub67A50RsLyBRBEk8vwpyirof5zZeT3TH6NftMCS1pwlRWvBkiL5fM22Jtc__Gw9eBVyaHXS7jmOZXHbiUTke5Hbi6Xv2WEofdsNpOX6MLre_fKFH_8aAKP1vvFtBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.439Z","timestamp":1788682696439,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSzYsc1Rd93Wl-v4ULQUJwIdKCiKLdqe_qSnbBj00yIyYSwYW-r-p509VVlXqvuju9chJ1PYILN0L16Z6ZLCQoLrLVHheCIKR2A2Y2_gOCIC6lexpHLah773v3cN-5h_PprDwlXZT05O0b2VQlCb3sd632y7dVKrKxbm_dattW17ravq3SwLvanqxCMbpiu17XeqX9luSD7LJj2ZZlW3b7TVXIOJtcXneh8od25HcDr2vbva7tO5gU_73RZROaNiFGp-QZKFE__Wv8PhRfIh1-_brUA5Plr70xLBNqsgIjcfRuOkizcYrheRkXDcTp0QaNTNeEfNFElh5ttkA2Wqy2AFM1aV56ApYebaiCjQ7O2LIEMgUTT2E8WkImSyi6BM_uQ4nHBOACW9tIh4dbWTGmd8-6dNWtSeuP36HGNWk9uYh0-PBaoibtm1lSGpWlGpO4gposofpL5OUSZtqEGh-Dm3tQ4mdiNZ9HOjy4QcuCQomTFy2bWqHPWScO_KgT0sjqRIzzjucJYUc07rkeW2uk4iWobqBc_aqBMm6izJsYipM2jXoxiwKPRjIOY2HZIae-60ah5ztxwH2UfA9K7IMXnzzIxY4ZjLxoYYpSHpYp1140s78qP8gTJ_J6oWP5M_vwDLXGLFaYmY282Hsg3FC6jHszioHahxYNaEMwEtWBSLSjq0OR6JLZm-xsslvNM9Of0YPM9GVKQIt9FKJaqPyOvg9uLsynsRbzbBUoM9WcMlHNlTAExZ1_iUSdThhYTqcnvbjjxXEUOqEdCiEWsTZlNcs33mp8_5vEQJ60IxmvtOy5Ts-NAk8EkWABdyJmB1L4UQCtKijdXIs7VTV579EvyFVNGs--BEaPoZNjcHUBtLRBxxXoToVp-u0OTft9OpS621dmp2RdlUFkFXLTgrnbgDRklpySi_N3bl37bu0c-egSJP-JbD7wokJeVNhVPxD0k71vtnOjhmpKV1a6aaiR_wNVj7f_BFc1ufT_e2tPX3nuVfD8I-j870nzROc1ub67A50RsLyBRBEk8vwpyirof5zZeT3TH6NftMCS1pwlRWvBkiL5fM22Jtc__Gw9eBVyaHXS7jmOZXHbiUTke5Hbi6Xv2WEofdsNpOX6MLre_fKFH_8aAKP1vvFtBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 5\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 612b4e32de6119ca41f760918709de23\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/1b50e57a5911fd0a5b46962ab48ca22b","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.354Z","timestamp":1788682697354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 16:05:40 GMT","end":"Thu, 26 Nov 2026 17:05:35 GMT"},"fingerprint":{"sha1":"BC:77:44:FD:F1:4E:49:75:F1:D1:4B:79:5E:0C:25:1B:61:78:53:C3","sha256":"27:14:1A:D5:8D:DC:F0:58:04:A8:C7:F1:58:29:46:06:3B:1D:5B:D4:A1:B5:75:53:59:6E:AA:82:C8:D7:D3:65"}}},"request":{"raw":"GET /17/1b50e57a5911fd0a5b46962ab48ca22b HTTP/1.1\r\nHost: mamshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a075cb-f605-7b65-97e9-f972e7969af0_1; __cf_bm=H.SLcLrpcnZ2RQuqGJgJCPqKhq7LYlMs8fFINSyEDz8-1788682696.1750274-1.0.1.1-qfuJnHgtbjMN18a3FGYVQ5RVW8no4i7D3ZhBPE0YKFDgzv3DTq6lRkXO1z43NKyw9L7PzM9DNpDIEoOAGH1jP3F06nau5he2oUNTJiVSlWEQPG.hsmz3_DaP__80zV_m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccept-ch: X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model,X-Device-User-Agent\r\ncontent-encoding: gzip\r\nlink: \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 7a0af8abf12f1e387312d83fe354ed6c\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36c0aca7878b51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4366,"size_decoded":3501,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4366), with no line terminators","md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/6c/19/f2/6c19f27b88977430b2161585aeb721c0/1780321794.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.485Z","timestamp":1788682697485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/6c/19/f2/6c19f27b88977430b2161585aeb721c0/1780321794.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 138603\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 01 Jun 2026 13:49:54 GMT\r\netag: \"6a1d8e02-21d6b\"\r\nexpires: Tue, 08 Sep 2026 08:18:17 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138603,"size_decoded":138952,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"7ff7e3e0e65103fb474f56e88c9a538c","sha1":"454f351abac3b86448f5a50a14c30b5546664461","sha256":"9d0257dc6ed43256536e1d8e3f552ebb875f6a1e50a2b60650a613f83f9ea722","sha512":"6bdb11f9a69053e0f192e434fdb624c8b92ef39b8ae9854b50629071e1313cc6708343c237a3ff108a8dfb174ad5ad034eb5c46fa90985128966e036ff10f405","ssdeep":"3072:aivEPfIvw0L5GeV/3jBWACzI++JATiFb/6uAmmyOR0RxWMUWyuCbw:0wvw0QeV/jBWovFb/FAmER02Mryhw","tlshash":"42d31278ede24300527b79253d6e0643fb6178bb45239be13c92d8f9de0c976460f499","first_seen":"2026-06-01T22:48:23.317946Z","last_seen":"2026-09-20T23:59:01.868895Z","times_seen":105,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.632Z","timestamp":1788682705632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 03 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 252047\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-23T02:50:01.589821Z","times_seen":304782,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/9c5d14453d6b11cdec5b98e5ce5af0dc","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.564Z","timestamp":1788682709564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 16:05:40 GMT","end":"Thu, 26 Nov 2026 17:05:35 GMT"},"fingerprint":{"sha1":"BC:77:44:FD:F1:4E:49:75:F1:D1:4B:79:5E:0C:25:1B:61:78:53:C3","sha256":"27:14:1A:D5:8D:DC:F0:58:04:A8:C7:F1:58:29:46:06:3B:1D:5B:D4:A1:B5:75:53:59:6E:AA:82:C8:D7:D3:65"}}},"request":{"raw":"GET /17/9c5d14453d6b11cdec5b98e5ce5af0dc HTTP/1.1\r\nHost: mamshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uidm=01a075cb-f605-7b65-97e9-f972e7969af0_1; __cf_bm=H.SLcLrpcnZ2RQuqGJgJCPqKhq7LYlMs8fFINSyEDz8-1788682696.1750274-1.0.1.1-qfuJnHgtbjMN18a3FGYVQ5RVW8no4i7D3ZhBPE0YKFDgzv3DTq6lRkXO1z43NKyw9L7PzM9DNpDIEoOAGH1jP3F06nau5he2oUNTJiVSlWEQPG.hsmz3_DaP__80zV_m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version\r\ncontent-encoding: gzip\r\nlink: \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 9\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 2c3ad8c5ca699c89b2984a67b613d1b5\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36c0b16c97db51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4366,"size_decoded":3501,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4366), with no line terminators","md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/search.js","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:13.993Z","timestamp":1788682693993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /search.js HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/category-top-down251\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 08:18:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gnvjZAeMm9TOUUEnOI865QhfaM%2F3r%2BAnVzgr2Y5zYwVmTXXA%2BJuid26AevIPwNbvlRZSHKkRC37bt0i9Es6bYW8rbyN4cQsQvxRrTq0QSUgi2UlQ6VxweppBo4JtNRZFLDwlyp15aeh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a36c0ab578a10883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/e1/92/8b/e1928b196763b21b3249c76adcbb4d51/1606922462.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.349Z","timestamp":1788682696349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/e1/92/8b/e1928b196763b21b3249c76adcbb4d51/1606922462.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16657\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 02 Dec 2020 15:21:11 GMT\r\netag: \"5fc7b0e7-4111\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16657,"size_decoded":17005,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"fcb23ca124c7aefe83ea188b0c6223e8","sha1":"8887e72acc5b8d6ff0ba0de2f0e760db87986170","sha256":"3b9bd2f7bfb8faae21e4a02fa8a640677a6b546f7c4d9adbb750b2a7d96bbb09","sha512":"4487a9b0849056e99cb285fb071a93ecd5470e065c3f10f3a12bc0ddbbd6212e5bd8bb5628a30ca949922c0453f589e069e75f0cae62fdb925df8ccfe43e4a38","ssdeep":"384:Y1gPJr4NiLSbx6PJz6ARBYtDGPTQa4PaC0CGT:YiPJr4N3bshGArYtCrQJX0hT","tlshash":"1472d15b844710dcfe2d017197b83e5b7bcf861f658e20bb0bc961ea8905d5bc4c2659","first_seen":"2026-06-06T04:37:04.55918Z","last_seen":"2026-09-22T10:47:20.34582Z","times_seen":98,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":34,"connect":19,"send":0,"wait":26,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4scxR-tnsz3e_EgxCCCIK3IouDOdvd092ybW_DHKbtqViJ4qh9ds5Xt6ep0Vc9M5rRrREQQ9uDBi9D7Zjd7C4pCrmbWgyAI6duA2Yv_gCBIjjKTwRUb-n0-Va-oeq9efXZUnZMOKjp_77qeqCyjG1HHc1-7qXKhR8bd2nF9r-NddW-qPA6vuuMFlMM3_W7Y8V533035nt4IPN_zfM9331FlKvV4Y8lCFff9JOrEYcf3Nzt-FGBc_nfGVA4MdSCG5-QylGie_V1-DMVnyAffvpWaPauLN94eVBm1usRQnH6Y7-V6lGNw0crSgcxPV6uhTUPI1y3o_HTlAnp4vHABphrSev4xWH66kgo2PHmqlmVIczDxDEbDGdJsBkVn4PoulHhEAC6wtY18cG9LlyN65ylLF2xD2n_9CTVqSPvxFeSD-9cyNXZv6KyySucGY1lDjWdQ_RmK6gx20oIanYHbT6DEr8RrvYR8cHKdViWFEvXSvpIzUOOgWvzKQSVbqIoWBmLu0mRTsiQOaZLKnhSe3-M06naTXhgFMuYRKn4AJQ7By30U5T721CGMcGBsQ5z39zEU9YnITGDqeyIzFfNXNVjVbj3Vtn9ET7TtpzkBLQ9RivpYFbfNXXB7aTqRRkz1Aiiz9ZQyUU-VsATl7fmrnk-9XsTZuoyjaL3nB946ox5fj71eL2SSiiCMjqWxVX1UrGJ3Hv6RYi-du0kqw1CIzW6w2U3iUMSJYDEPEubHqYiSGEbVUKa1vJyJashHD35DoRrivLAGRs9gsjNwdQm08kFHNehujUn-_S7N-306SE2nr-xuxTpKQ-gahW3D3nGQWnKUnZMr0w92rv24DHXthy-Q8l_I6gMvaxRljVvqJ4J-dvDddmHVQE3oIuUbltr0_6Dq0fYTcNWQ_z15Zfncntv6HLzYhyn-2WmamaIhaw-_hNEErGghUwRZenEUZTXMv8bsoj8yn6JftsGy9pRlZfuYZWX2VUPSBy8uJS_goCHy8g6MmrueCFOfJzTqyTSKIhaFAZeSeb1AdrvBZgJrmlvfvPzz3wMAhevVFAgEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.362Z","timestamp":1788682696362,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4scxR-tnsz3e_EgxCCCIK3IouDOdvd092ybW_DHKbtqViJ4qh9ds5Xt6ep0Vc9M5rRrREQQ9uDBi9D7Zjd7C4pCrmbWgyAI6duA2Yv_gCBIjjKTwRUb-n0-Va-oeq9efXZUnZMOKjp_77qeqCyjG1HHc1-7qXKhR8bd2nF9r-NddW-qPA6vuuMFlMM3_W7Y8V533035nt4IPN_zfM9331FlKvV4Y8lCFff9JOrEYcf3Nzt-FGBc_nfGVA4MdSCG5-QylGie_V1-DMVnyAffvpWaPauLN94eVBm1usRQnH6Y7-V6lGNw0crSgcxPV6uhTUPI1y3o_HTlAnp4vHABphrSev4xWH66kgo2PHmqlmVIczDxDEbDGdJsBkVn4PoulHhEAC6wtY18cG9LlyN65ylLF2xD2n_9CTVqSPvxFeSD-9cyNXZv6KyySucGY1lDjWdQ_RmK6gx20oIanYHbT6DEr8RrvYR8cHKdViWFEvXSvpIzUOOgWvzKQSVbqIoWBmLu0mRTsiQOaZLKnhSe3-M06naTXhgFMuYRKn4AJQ7By30U5T721CGMcGBsQ5z39zEU9YnITGDqeyIzFfNXNVjVbj3Vtn9ET7TtpzkBLQ9RivpYFbfNXXB7aTqRRkz1Aiiz9ZQyUU-VsATl7fmrnk-9XsTZuoyjaL3nB946ox5fj71eL2SSiiCMjqWxVX1UrGJ3Hv6RYi-du0kqw1CIzW6w2U3iUMSJYDEPEubHqYiSGEbVUKa1vJyJashHD35DoRrivLAGRs9gsjNwdQm08kFHNehujUn-_S7N-306SE2nr-xuxTpKQ-gahW3D3nGQWnKUnZMr0w92rv24DHXthy-Q8l_I6gMvaxRljVvqJ4J-dvDddmHVQE3oIuUbltr0_6Dq0fYTcNWQ_z15Zfncntv6HLzYhyn-2WmamaIhaw-_hNEErGghUwRZenEUZTXMv8bsoj8yn6JftsGy9pRlZfuYZWX2VUPSBy8uJS_goCHy8g6MmrueCFOfJzTqyTSKIhaFAZeSeb1AdrvBZgJrmlvfvPzz3wMAhevVFAgEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d4ee33743f22dd28ee1bbbadae9ef2e4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:20.060Z","timestamp":1788682700060,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:40:44 GMT","end":"Sun, 15 Nov 2026 23:40:43 GMT"},"fingerprint":{"sha1":"04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A","sha256":"0B:F1:DB:9B:8C:77:3E:61:8B:03:C2:BF:97:81:32:72:FC:3C:87:CC:8E:6E:6B:D5:93:EF:4F:11:1C:B6:E2:06"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2a6810a06d53339eb7c8d1b790e1fc24\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37950,"size_decoded":18372,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37943), with no line terminators","md5":"8b2235271c16f8771b21b86e1f28b646","sha1":"79076a682bb500cf7ce5a0c3b7791f444f0b4745","sha256":"2c474c90d59dd2f40732e241bcaa6d9dfdcad896d3689f7e3a4d0383aecdc7ae","sha512":"0a0a45fdba13e92501476f4744c492c70dcc537f521bf5e0ab08d58af1a1103327d809cf576eb79563a6499816136234f93a523d78ef709986808215dab780e9","ssdeep":"768:2bau76Vkz0LIRCwNvDVlW2WE2FXgi+7RB6hJgbGNqJXY1ATJSf5Rr+LPL8jvZtd6:2GMtW7Qi+7RB8JMGNqJLLFNZB","tlshash":"510329d87193b03993b718e71477a214b23a1c15300a9983e17e5c863d63e5bd23bfad","first_seen":"2026-09-03T11:38:17.004803Z","last_seen":"2026-09-23T03:04:04.362436Z","times_seen":4011,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":3,"connect":19,"send":0,"wait":27,"receive":18,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026uuid=01a075cb-f659-7a90-9bcc-44dd19af834b%3A1%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22a%22%7D\u0026rb=e","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.623Z","timestamp":1788682709623,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026uuid=01a075cb-f659-7a90-9bcc-44dd19af834b%3A1%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22a%22%7D\u0026rb=e HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:29 GMT; Secure; SameSite=None\nuncs=4; Path=/; Expires=Mon, 07 Sep 2026 08:18:29 GMT; Secure; SameSite=None\nuncs49=4; Path=/; Expires=Mon, 07 Sep 2026 08:18:29 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 17\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 32950b60ed19876c125762b532d96eb1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-7a90-9bcc-44dd19af834b:1:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:29Z","raw_expires":"Sun, 13 Sep 2026 08:18:29 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:29 GMT; Secure; SameSite=None"},{"name":"uncs","value":"4","quoted":false,"path":"/","expires":"2026-09-07T08:18:29Z","raw_expires":"Mon, 07 Sep 2026 08:18:29 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=4; Path=/; Expires=Mon, 07 Sep 2026 08:18:29 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"4","quoted":false,"path":"/","expires":"2026-09-07T08:18:29Z","raw_expires":"Mon, 07 Sep 2026 08:18:29 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=4; Path=/; Expires=Mon, 07 Sep 2026 08:18:29 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15731,"size_decoded":10137,"mime_type":"application/json","magic":"JSON text data","md5":"70048116473433cffd6010262b57eeed","sha1":"c83d7970cb5a38c51ee3c4a7bdb715afaf488742","sha256":"3d3c29baa24cc2f6894936d46c7582e87d6bedea1bcc8ef50501a2a2d8a0b11d","sha512":"2dfe0a1fd9c44e580f5e8f90a20d67817513dfc2bbcb874e0d8a2135758172101f646ecd03e007d2a40d3ad9d58d6f179ea9ae3dddec4116ba6f64d7e05eec05","ssdeep":"384:/nFK9stFK9sQ6sHbeibEfQpMsgSZFidcstdzdeVU3X8oKz3XxK5ONFN9q:/M9b6sHb1bE4pMsgSmhjzdeVUteRIOrq","tlshash":"46629dbe0a5e228c260df548584b76afbcc7b64b52c8df214114c1aa2d2d997961ef31","first_seen":"2026-09-06T08:18:49.314874Z","last_seen":"2026-09-06T08:18:49.314874Z","times_seen":1,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":45,"receive":18,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/39/5f/93/395f9367590ed0e6ad306cef2cd4afff/1607066960.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.754Z","timestamp":1788682709754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/39/5f/93/395f9367590ed0e6ad306cef2cd4afff/1607066960.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21416\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 04 Dec 2020 07:29:28 GMT\r\netag: \"5fc9e558-53a8\"\r\nexpires: Tue, 08 Sep 2026 08:18:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21416,"size_decoded":21764,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"46cb2b3c39a53bb2a3229f11fb9ae898","sha1":"7ebaa76e879d08dd4bf7f3629ce56ecb3a33fcb4","sha256":"85ecb6435b2bc9a2d41decd9d7f83a7fda49a5841680f4a519ae11c40b9abd87","sha512":"412665dd7ca21fbfd507e9cc99ee86a5aabd749053e0f5683b12aab45afb4aa92fc4936657b445a529b8acb5e50efba8083dbea849d9833461b4590e39cc1365","ssdeep":"384:YnEOhXN3qK788zUOFnU/xxvCsKUVmf+emWBQYMWOwkdrps47q4oMY19tMc9LE:YEOhXVqK1zUOFnUZxaTAmfiWBBarC54Z","tlshash":"f6a2d018aa8512ee7f62e1f151af8d1143e1bf0275d0375e23849274e225fe9e14ce7a","first_seen":"2026-06-05T02:47:05.630713Z","last_seen":"2026-09-21T03:07:38.90925Z","times_seen":106,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/ase","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:30.564Z","timestamp":1788682710564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:55:20 GMT","end":"Tue, 24 Nov 2026 05:55:19 GMT"},"fingerprint":{"sha1":"D9:C4:6B:72:BF:AD:1D:89:A0:42:3A:8F:4C:FB:16:ED:76:B5:49:4E","sha256":"5A:7C:DE:6E:DA:4D:5D:C0:2A:21:D8:D5:89:20:66:D3:9E:94:22:FF:B3:29:F3:C8:20:0D:25:E4:9A:74:C3:D2"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 270\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1612,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":25,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:13.989Z","timestamp":1788682693989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 06 Sep 2026 08:18:14 GMT\r\ndate: Sun, 06 Sep 2026 08:18:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7284,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0e55d20e269b28df5f410ed7d2a2bd68","sha1":"37a7ac9ba286c112752af0642c13cea54386ebfb","sha256":"1d22ecda1718834ed6a2add4df02f702b150a4488e772f47f1345112a693153c","sha512":"abe3409e164c9939ec3320b41988ff9fc21829becadb8d4dd184555bde2ffbb93109741b579f3109512c8ac23d7445f4892a479c6af83d0dc2908c00045df188","ssdeep":"192:OH+yptkUkH0yXLkeLHbywkkdiHyy1RkoH:il6DPe9hV","tlshash":"41e18891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-20T18:40:24.45605Z","last_seen":"2026-09-19T07:35:36.350949Z","times_seen":276,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":46,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/pixel/ase","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.260Z","timestamp":1788682697260,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:39:42 GMT","end":"Tue, 24 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"64:94:D5:7E:85:BC:06:31:05:FA:D2:57:67:61:B8:39:DE:C2:0B:85","sha256":"C2:67:CB:CB:4E:30:0F:8F:62:75:A6:1E:7B:32:F0:CA:EA:28:34:D9:5D:06:FD:CF:55:31:BE:CF:94:24:F3:B5"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 713\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":713,"data":"[{\"placement_key\":\"2a362e5cae20c33eeea29a03144bdf06\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.bb.ready\",\"id_frontend_invoke\":\"01a075cb-f640-71dc-9a8d-cbdae0819db3\",\"script_version\":\"\",\"extra_json\":{\"cpk\":\"1b50e57a5911fd0a5b46962ab48ca22b\"}},{\"placement_key\":\"2a362e5cae20c33eeea29a03144bdf06\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.load_watch.success\",\"id_frontend_invoke\":\"01a075cb-f640-71dc-9a8d-cbdae0819db3\",\"script_version\":\"\"},{\"placement_key\":\"2a362e5cae20c33eeea29a03144bdf06\",\"template_body\":\"body_banner_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f640-71dc-9a8d-cbdae0819db3\",\"script_version\":\"\",\"extra_json\":{\"path\":\"iframe\"}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":2071,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":28,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/88/88/a1/8888a19c6a1141f12aba002c4984b9b9.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:19.927Z","timestamp":1788682699927,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"levitydinerdowny.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 00:38:22 GMT","end":"Fri, 06 Nov 2026 00:38:21 GMT"},"fingerprint":{"sha1":"8F:C8:EC:66:A9:2C:C4:C9:BC:54:1A:99:9D:0E:65:9D:CB:CE:5A:E9","sha256":"E1:54:D3:ED:AE:BB:39:C4:9D:8C:81:DD:F8:62:A6:1D:A4:48:E2:3C:A4:D2:ED:09:DB:A4:3A:7B:9C:5F:9C:3D"}}},"request":{"raw":"GET /88/88/a1/8888a19c6a1141f12aba002c4984b9b9.js HTTP/1.1\r\nHost: levitydinerdowny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pip_8f26c41cec9b382d7b940db003223fde=1; pip_5968a976363b7c9ef2324b6a7fba9a55=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:19 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: levitydinerdowny.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 146542a966f9c9b8dd76ada62e77e4f5\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":66344,"size_decoded":26663,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"536e804bd9ba6658f2ca9ebbe3243cd8","sha1":"3d944525613dc956b8496982293b7a7ef2d9c1f0","sha256":"be481d54e42065254a5de45f472f5aad5ce98e69b7ac4c5c482609f089ac5421","sha512":"afa68bd0d813be532f7fe766ea0f54be8034a37dd7a4f63d8e977061727c6550d6279187060ffdd1d90f8836f7ee332d06a3618000780b2b4f642665a006b737","ssdeep":"768:V2tRfLdni5RtHYDoZvR1HbwDJIKaE1KmPjvZeOLXdts8pTLC0s6pBA1HOoqdnbqX:6Fi5PZvRNKdgh8Kafp7Hh0v1GQ/Ce","tlshash":"3053e68a2f5fa16913b1a8fb3217a031e016dc83b099d4d8f02dbd8c6f66319b57656c","first_seen":"2026-09-06T08:18:49.317069Z","last_seen":"2026-09-06T08:18:49.317069Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"levitydinerdowny.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026rb=e","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.233Z","timestamp":1788682696233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026rb=e HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\npdhtkv49=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs49=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nu_pl29487205=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 15\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 31329a92cea2bb8d3ddd61a5391689d2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"pdhtkv49","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv49=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"u_pl29487205","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl29487205=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14719,"size_decoded":12282,"mime_type":"application/json","magic":"JSON text data","md5":"74bf959868e4f86dc77a8f7794e9f029","sha1":"7d9aca7fb702cecbe83b220d0aafbb1bda760ff8","sha256":"aa0860cdfffa9e6916f6529cfdea331165f301f55ea5d5beda0c5daec501f5e9","sha512":"ee386f15f52bbeefbe71ccf5a87a1bfa824a7524dc5a88d432b841d7370a90d0bce63b86f87be0554bd67fe58de4e4197be9d7682727dd7b788cdbdfc45a9743","ssdeep":"384:4SXTOvT/9BTlh7wItLkUYFTzbECZRljKVmq77:4AOLFRlh7ftLkUYuCdjK777","tlshash":"fb62b07b8ee40fa80bc84d16a0197be93f0562270b88ce70716a49e83c74584965a7f5","first_seen":"2026-09-06T08:18:49.318084Z","last_seen":"2026-09-06T08:18:49.318084Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":39,"receive":21,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitnh29eBBiEEGQViQouLPdPd092-YW_HHKrpqVCJ7qR9dsZXu6Ol3VM5O5uGvEg6c9ePAi9L7Zzd6CopCrznoQBCF9GzB78R8QBMlRZjK4koL6vq_qFV-9V6--PKrOSQcVnX9wXU9UltGNqOO5b9xUudAj427tuL7X8a66N1Ueh1fd8SKUw7f9btjx3nTfT_me3gg83_N8z3ffU2Uq9XhjiUIV9_0k6sRhx_c3O34UYFw-vWMqB4Y6EMNzcglKNM__KT-F4jPkg-_eSc2e1cVb7w6qjFpdYihOP873cj3KMbgoZelA5qer09CmIeSbFnR-ulIBPTxeqABTDWm9-AgsP11RBRuePGHLMqQ5mHgOo-EMaTaDojNwfRdKPCQAF9jaRj64t6XLEb3zBKULtCHtf_6GGjWk_egy8sH9a5kauzd0Vlmlc4OxrKHGM6j-DEV1BjtpQY3OwO3nUOJ34rVeQT44uU6rkkKJeilfyRmocVAtpnJQyRaqooWBmLs02ZQsiUOapLInhef3OI263aQXRoGMeYSKH0CJQ_ByH0W5jz11CCMcGNsQ58N9DEV9IjITmPqeyEzF_FUOVrlbT7XtH9ETbftpTkDLQ5SiPlbFbXMX3K5NJ9KIqV4Eymw9pUzUUyUsQXl7_rrnU68XcbYu4yha7_mBt86ox9djr9cLmaQiCKNjaWxVHxUr252f_0qxl87dJJVhKMRmN9jsJnEo4kSwmAcJ8-NUREkMo2oo01o-zkQ15JMHf6BQDXFeugJGz2CyM3C1Blr5oKMadLfGJP9hl-b9Ph2kptNXdrdiHaUhdI3CtmHvOEgtOcrOyeXpRzvXflqaeuXHA6T8N7Ia4GWNoqxxS_1C0M8Ovt8urBqoCV24fMNSmz4Lqh5uPwZXDXnm8WvL7_bC1mfgxT5M8V-naWaKhshLOzCagBVryBRBll5cRVkN8781u6iPzBfol22wrD1lWdk-ZlmZfd2Q9MHLC8pfLXmvuqu564kw9XlCo55MoyhiURhwKZnXC2S3G2wmsKa59e2rv_47ALdXGK4IBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.363Z","timestamp":1788682696363,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4scRRitnh29eBBiEEGQViQouLPdPd092-YW_HHKrpqVCJ7qR9dsZXu6Ol3VM5O5uGvEg6c9ePAi9L7Zzd6CopCrznoQBCF9GzB78R8QBMlRZjK4koL6vq_qFV-9V6--PKrOSQcVnX9wXU9UltGNqOO5b9xUudAj427tuL7X8a66N1Ueh1fd8SKUw7f9btjx3nTfT_me3gg83_N8z3ffU2Uq9XhjiUIV9_0k6sRhx_c3O34UYFw-vWMqB4Y6EMNzcglKNM__KT-F4jPkg-_eSc2e1cVb7w6qjFpdYihOP873cj3KMbgoZelA5qer09CmIeSbFnR-ulIBPTxeqABTDWm9-AgsP11RBRuePGHLMqQ5mHgOo-EMaTaDojNwfRdKPCQAF9jaRj64t6XLEb3zBKULtCHtf_6GGjWk_egy8sH9a5kauzd0Vlmlc4OxrKHGM6j-DEV1BjtpQY3OwO3nUOJ34rVeQT44uU6rkkKJeilfyRmocVAtpnJQyRaqooWBmLs02ZQsiUOapLInhef3OI263aQXRoGMeYSKH0CJQ_ByH0W5jz11CCMcGNsQ58N9DEV9IjITmPqeyEzF_FUOVrlbT7XtH9ETbftpTkDLQ5SiPlbFbXMX3K5NJ9KIqV4Eymw9pUzUUyUsQXl7_rrnU68XcbYu4yha7_mBt86ox9djr9cLmaQiCKNjaWxVHxUr252f_0qxl87dJJVhKMRmN9jsJnEo4kSwmAcJ8-NUREkMo2oo01o-zkQ15JMHf6BQDXFeugJGz2CyM3C1Blr5oKMadLfGJP9hl-b9Ph2kptNXdrdiHaUhdI3CtmHvOEgtOcrOyeXpRzvXflqaeuXHA6T8N7Ia4GWNoqxxS_1C0M8Ovt8urBqoCV24fMNSmz4Lqh5uPwZXDXnm8WvL7_bC1mfgxT5M8V-naWaKhshLOzCagBVryBRBll5cRVkN8781u6iPzBfol22wrD1lWdk-ZlmZfd2Q9MHLC8pfLXmvuqu564kw9XlCo55MoyhiURhwKZnXC2S3G2wmsKa59e2rv_47ALdXGK4IBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Device-User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d1faa7f4a831bb1e4407acb511f87403\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcCfdPd0901lPwR8Hza4mKxG8WL96trI9Xb1d1TOTOW2MeJQFPXgRet_sZm9B8ZCrzooIgpC-LZj14D8gCOJRZjK4YkF931f1iqr36n2fHlRnpIOKnr57TU9VltHLUcdzX76pcqHHxt3Ycn2v4627N1Ueh-vuZBHK0RW_G3a8V9y3JN_RlwPP9zzf8903VSlTPbm8RKGK-34SdeKw4_v9jh8FmJT_3zGVA0MdiNEZeQZKNE__nn4IxefIh1-_Ls2O1cWrbwyrjFpdYiSO3893cj3OMTwv09JBmh-vTkObhpAvW9D58UoF9OhwoQJMNaR16RFYfryiCjY6esyWZZA5mHgK49EcMptD0Tm4vgslHhKAC2xsIh_e29DlmN5-jNIF2pD2X39CjRvSfnQR-fD-1UxN3Bs6q6zSucEkraEmc6jBHEV1AjttQY1PwO3HUOIX4rWeRz48ukarkkKJeilfpXNQ46BaTOWgSluoihaG4tSlST9lSRzSRKa9VHh-j9Oo2016YRSkMY9Q8TtQYh-83ENR7mFH7cMIB8Y2xHlvDyNRH4nMBKa-JzJTMX-Vg1Xu1jNtBwf0SNuBzAlouY9S1Ieq2DV3we2F2TQ1YqYXgTJbzygT9UwJS1Dunr7o-dTrRZytpXGvv9bzg2CNeQFfo4KnNOpHMWP0MDW2qg-Kle3O939I7MhTN5FpGArR7wb9bhKHIk4Ei3mQMD-WIkpiGFVDmdbyc6aqIR88-BWFaojz7Etg9AQmOwFXF0ArH3Rcg27XmObfbtN8MKBDaToDZbcr1lEaQtcobBv2tgNpyUF2Ri7Orm9d_W5pqnzwNiT_mawGeFmjKGvcUj8QDLI732wWVg3VlC5cvmGplU-Aqoebf4Orhlx68rNlu1157jp4sQdT_HvTLDNFQ9756HMYTcCKFjJFkMnzpyirYf6zZuf1gfkEg7INlrVnLCvbhywrsy8WbLeWlBvy2m8_NmS92YVRp24_CDyP-0EikihMuv1URqHf68nI78bS60awprn11Qs__TMAQ51pBggEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.406Z","timestamp":1788682696406,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcCfdPd0901lPwR8Hza4mKxG8WL96trI9Xb1d1TOTOW2MeJQFPXgRet_sZm9B8ZCrzooIgpC-LZj14D8gCOJRZjK4YkF931f1iqr36n2fHlRnpIOKnr57TU9VltHLUcdzX76pcqHHxt3Ycn2v4627N1Ueh-vuZBHK0RW_G3a8V9y3JN_RlwPP9zzf8903VSlTPbm8RKGK-34SdeKw4_v9jh8FmJT_3zGVA0MdiNEZeQZKNE__nn4IxefIh1-_Ls2O1cWrbwyrjFpdYiSO3893cj3OMTwv09JBmh-vTkObhpAvW9D58UoF9OhwoQJMNaR16RFYfryiCjY6esyWZZA5mHgK49EcMptD0Tm4vgslHhKAC2xsIh_e29DlmN5-jNIF2pD2X39CjRvSfnQR-fD-1UxN3Bs6q6zSucEkraEmc6jBHEV1AjttQY1PwO3HUOIX4rWeRz48ukarkkKJeilfpXNQ46BaTOWgSluoihaG4tSlST9lSRzSRKa9VHh-j9Oo2016YRSkMY9Q8TtQYh-83ENR7mFH7cMIB8Y2xHlvDyNRH4nMBKa-JzJTMX-Vg1Xu1jNtBwf0SNuBzAlouY9S1Ieq2DV3we2F2TQ1YqYXgTJbzygT9UwJS1Dunr7o-dTrRZytpXGvv9bzg2CNeQFfo4KnNOpHMWP0MDW2qg-Kle3O939I7MhTN5FpGArR7wb9bhKHIk4Ei3mQMD-WIkpiGFVDmdbyc6aqIR88-BWFaojz7Etg9AQmOwFXF0ArH3Rcg27XmObfbtN8MKBDaToDZbcr1lEaQtcobBv2tgNpyUF2Ri7Orm9d_W5pqnzwNiT_mawGeFmjKGvcUj8QDLI732wWVg3VlC5cvmGplU-Aqoebf4Orhlx68rNlu1157jp4sQdT_HvTLDNFQ9756HMYTcCKFjJFkMnzpyirYf6zZuf1gfkEg7INlrVnLCvbhywrsy8WbLeWlBvy2m8_NmS92YVRp24_CDyP-0EikihMuv1URqHf68nI78bS60awprn11Qs__TMAQ51pBggEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 790722bf818dd13ff2d69d9e9c8a776b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.1432850189708.js?key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.358Z","timestamp":1788682697358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /watch.1432850189708.js?key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\nlocation: https://spendsdetachment.com/watch.1432850189708.js?dev=e\u0026fstu=01a075cb-fc59-7759-9cbc-36f448a75f47\u0026key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026ps1=1788682697\u0026rb=e\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026res=14.1055\u0026rmtc=t\u0026sht=WxD3tT-CaV5okCDtXpfbnwyNRyOXYm9IFlNHe2V1J-w\u0026shv=2\u0026st1=ebae1a9263777a4d9d0cd6a995db8723\u0026tz=0\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1\r\nset-cookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:17 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTQ4NzIwNywiayI6IjJhMzYyZTVjYWUyMGMzM2VlZWEyOWEwMzE0NGJkZjA2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1ODE0MjM2LCJwaWQiOjcxNzE4LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjMsImFpZCI6MjMsInB0Ijo0LCJwayI6ImJrOTIyMnMyIiwiY3BrcyI6eyIyOCI6IjU5NjhhOTc2MzYzYjdjOWVmMjMyNGI2YTdmYmE5YTU1In0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9sZWFybnF1ZXN0ZXIucGFnZXMuZGV2L2NhdGVnb3J5LXRvcC1kb3duMjUxIiwidHoiOjIsImlkdWMiOjAsImFyIjpbXX19.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; Path=/; Expires=Sun, 06 Sep 2026 08:19:17 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8ff7f61cc34b6dc95c32709daf1583cd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-769f-a3d2-d85d0b523e60:2:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:17Z","raw_expires":"Sun, 13 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTQ4NzIwNywiayI6IjJhMzYyZTVjYWUyMGMzM2VlZWEyOWEwMzE0NGJkZjA2Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1ODE0MjM2LCJwaWQiOjcxNzE4LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjMsImFpZCI6MjMsInB0Ijo0LCJwayI6ImJrOTIyMnMyIiwiY3BrcyI6eyIyOCI6IjU5NjhhOTc2MzYzYjdjOWVmMjMyNGI2YTdmYmE5YTU1In0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9sZWFybnF1ZXN0ZXIucGFnZXMuZGV2L2NhdGVnb3J5LXRvcC1kb3duMjUxIiwidHoiOjIsImlkdWMiOjAsImFyIjpbXX19.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM","quoted":false,"path":"/","expires":"2026-09-06T08:19:17Z","raw_expires":"Sun, 06 Sep 2026 08:19:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; Path=/; Expires=Sun, 06 Sep 2026 08:19:17 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":0,"dns":3,"connect":100,"send":0,"wait":104,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=16135\u0026rd=16135\u0026fd=117\u0026bv=2026.8.4\u0026tmpl=70","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.569Z","timestamp":1788682709569,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:55:20 GMT","end":"Tue, 24 Nov 2026 05:55:19 GMT"},"fingerprint":{"sha1":"D9:C4:6B:72:BF:AD:1D:89:A0:42:3A:8F:4C:FB:16:ED:76:B5:49:4E","sha256":"5A:7C:DE:6E:DA:4D:5D:C0:2A:21:D8:D5:89:20:66:D3:9E:94:22:FF:B3:29:F3:C8:20:0D:25:E4:9A:74:C3:D2"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=16135\u0026rd=16135\u0026fd=117\u0026bv=2026.8.4\u0026tmpl=70 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":4,"connect":22,"send":0,"wait":26,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/2a362e5cae20c33eeea29a03144bdf06/invoke.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:15.725Z","timestamp":1788682695725,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"levitydinerdowny.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 00:38:22 GMT","end":"Fri, 06 Nov 2026 00:38:21 GMT"},"fingerprint":{"sha1":"8F:C8:EC:66:A9:2C:C4:C9:BC:54:1A:99:9D:0E:65:9D:CB:CE:5A:E9","sha256":"E1:54:D3:ED:AE:BB:39:C4:9D:8C:81:DD:F8:62:A6:1D:A4:48:E2:3C:A4:D2:ED:09:DB:A4:3A:7B:9C:5F:9C:3D"}}},"request":{"raw":"GET /2a362e5cae20c33eeea29a03144bdf06/invoke.js HTTP/1.1\r\nHost: levitydinerdowny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Device-User-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_5968a976363b7c9ef2324b6a7fba9a55=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 3\r\nHost: levitydinerdowny.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e5e1e590a0d8cc55aaeabf9e48fa0007\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_5968a976363b7c9ef2324b6a7fba9a55","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_5968a976363b7c9ef2324b6a7fba9a55=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":49008,"size_decoded":21433,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49008), with no line terminators","md5":"10bd70442f94ceaff2298dca9e1af7e6","sha1":"e9a7eb57e47d7e87cf73d3f33b331a95e155bf1b","sha256":"414068c27bc0875dc3b1a7a077ea730adeb3d354884007091dd357bba6cee385","sha512":"4c1cd8b469eeabf551600cca2543f6fb7dd6511375dcf691a02bae6661922b391e25f5c432e2c714325ce20d43a7bcceb75b7aceffdf73a0e7f1fe7054cce2dd","ssdeep":"768:5Zci1XerBzdkgAp8PIzvm6epOQQy3hN1xQ3L6gGh5XhVEZMRvjTWuVq5Amzy3iyr:0i1uDPHdyZsTBqVyWXfIfJ6myF8ZjSha","tlshash":"8e23f9cb7f91906413b1adf3b32ba539e549dd15b58cd4c8f07d28886f63362ac36628","first_seen":"2026-09-05T06:17:19.68881Z","last_seen":"2026-09-07T06:03:02.762661Z","times_seen":16,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":0,"dns":0,"connect":102,"send":0,"wait":109,"receive":102,"ssl":208},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"levitydinerdowny.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/watch.1740464712439.js?key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.337Z","timestamp":1788682696337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 05:39:42 GMT","end":"Tue, 24 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"64:94:D5:7E:85:BC:06:31:05:FA:D2:57:67:61:B8:39:DE:C2:0B:85","sha256":"C2:67:CB:CB:4E:30:0F:8F:62:75:A6:1E:7B:32:F0:CA:EA:28:34:D9:5D:06:FD:CF:55:31:BE:CF:94:24:F3:B5"}}},"request":{"raw":"GET /watch.1740464712439.js?key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\nlocation: https://workdeadlinededicate.com/watch.1740464712439.js?dev=e\u0026fstu=01a075cb-f706-70d2-ad9e-23aa47a57e46\u0026key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026ps1=1788682696\u0026rb=e\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026res=14.1055\u0026rmtc=t\u0026sht=77I4JErorGmTZsLhomY7j47Xv6Zn6fgYQp1YMz2anUc\u0026shv=2\u0026st1=8273de5e94778d82b26bab8c5af30bb0\u0026tz=0\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1\r\nset-cookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; Path=/; Expires=Sun, 06 Sep 2026 08:19:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7948e7160659b69d7ab6407ab5dcfa36\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-769f-a3d2-d85d0b523e60:2:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:16Z","raw_expires":"Sun, 13 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM","quoted":false,"path":"/","expires":"2026-09-06T08:19:16Z","raw_expires":"Sun, 06 Sep 2026 08:19:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; Path=/; Expires=Sun, 06 Sep 2026 08:19:16 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":31,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcGe7e7p7prOegj8Okl01KxFyql89W9mert6u6pnJnDZGPMoePHgRet_sZm9B8ZCrzooIgpC-LZj14D8gCOJRZjK4koL6vq_qFV-9V68-P6zOSQcVPfvgup6qLKPrUcdzX7-pcqHHxt3cdn2v4224N1UehxvuZBHK0VW_G3a8N9z3JN_V64Hne57v-e67qpSpnqwvUajigZ9EnTjs-H6_40cBJuXTO6ZyYKgDMTonL0CJ5vk_0ltQfI58-M3b0uxaXbz5zrDKqNUlRuLk43w31-Mcw4syLR2k-cnqNLRpCPmqBZ2frFRAj44WKsBUQ1pXHoPlJyuqYKPjJ2xZBpmDiecwHs0hszkUnYPre1DiEQG4wOYW8uH9TV2O6Z0nKF2gDWn__RfUuCHtx5eRDx9cy9TEvaGzyiqdG0zSGmoyhxrMUVSnsNMW1PgU3H4KJX4lXutl5MPj67QqKZSol_JVOgc1DqrFVA6qtIWqaGEozlya9FOWxCFNZNpLhef3OI263aQXRkEa8wgVvwslDsDLfRTlPnbVAYxwYGxDnA_3MRL1schMYOr7IjMV81c5WOVuPdN2cEiPtR3InICWByhFfaSKPXMP3F6aTVMjZnoRKLP1jDJRz5SwBOXe2aueT71exNlaGvf6az0_CNaYF_A1KnhKo34UM0aPUmOr-rBY2e788KfErjxzE5mGoRD9btDvJnEo4kSwmAcJ82MpoiSGUTWUaS0fZ6oa8snD31CohjgvvgZGT2GyU3B1CbTyQcc16E6Naf7dDs0HAzqUpjNQdqdiHaUhdI3CtmHvOJCWHGbn5PLso-1r3y9NlQ-3IfkvZDXAyxpFWeO2-pFgkN39dquwaqimdOHyDUutfAZUPdr6B1w15MqzXyy_29WXboEX-zDFf51mmSka8tbvP8FoAlY4yBRBJi-uoqyG-d-aXdSH5jMMyjZY1p6xrGwfsazMvlyyXYT3l40bstHswagztx8Ensf9IBFJFCbdfiqj0O_1ZOR3Y-l1I1jT3P76lZ__HQDX5086CAQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.405Z","timestamp":1788682696405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitngx68CBICB5EWhBRcGe7e7p7prOegj8Okl01KxFyql89W9mert6u6pnJnDZGPMoePHgRet_sZm9B8ZCrzooIgpC-LZj14D8gCOJRZjK4koL6vq_qFV-9V68-P6zOSQcVPfvgup6qLKPrUcdzX7-pcqHHxt3cdn2v4224N1UehxvuZBHK0VW_G3a8N9z3JN_V64Hne57v-e67qpSpnqwvUajigZ9EnTjs-H6_40cBJuXTO6ZyYKgDMTonL0CJ5vk_0ltQfI58-M3b0uxaXbz5zrDKqNUlRuLk43w31-Mcw4syLR2k-cnqNLRpCPmqBZ2frFRAj44WKsBUQ1pXHoPlJyuqYKPjJ2xZBpmDiecwHs0hszkUnYPre1DiEQG4wOYW8uH9TV2O6Z0nKF2gDWn__RfUuCHtx5eRDx9cy9TEvaGzyiqdG0zSGmoyhxrMUVSnsNMW1PgU3H4KJX4lXutl5MPj67QqKZSol_JVOgc1DqrFVA6qtIWqaGEozlya9FOWxCFNZNpLhef3OI263aQXRkEa8wgVvwslDsDLfRTlPnbVAYxwYGxDnA_3MRL1schMYOr7IjMV81c5WOVuPdN2cEiPtR3InICWByhFfaSKPXMP3F6aTVMjZnoRKLP1jDJRz5SwBOXe2aueT71exNlaGvf6az0_CNaYF_A1KnhKo34UM0aPUmOr-rBY2e788KfErjxzE5mGoRD9btDvJnEo4kSwmAcJ82MpoiSGUTWUaS0fZ6oa8snD31CohjgvvgZGT2GyU3B1CbTyQcc16E6Naf7dDs0HAzqUpjNQdqdiHaUhdI3CtmHvOJCWHGbn5PLso-1r3y9NlQ-3IfkvZDXAyxpFWeO2-pFgkN39dquwaqimdOHyDUutfAZUPdr6B1w15MqzXyy_29WXboEX-zDFf51mmSka8tbvP8FoAlY4yBRBJi-uoqyG-d-aXdSH5jMMyjZY1p6xrGwfsazMvlyyXYT3l40bstHswagztx8Ensf9IBFJFCbdfiqj0O_1ZOR3Y-l1I1jT3P76lZ__HQDX5086CAQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6bae7bacf20d50e638b79f7bed548657\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9yeT7QFwIOooLkSjSKJh0_Sfl7AZ_NjPdOj-M4ELeX6XfpFJVU-9VksnKdtR1L1yIIFRO0t2zkEFx4dZJuxOEKXDR4PRGcC0IMktJOk6LBXXvfec-7jv3cD6bFiekjYIev3s5nag4ppt-22q-ekMlIh3p5ta1pm21rQvNGyoJvAvN8TLkwzds12tbrzXfkbyfbjqWbVm2ZTffVrmM0vHmqguV3bNDvx14bdvutm3fwTj_L6KLBjRtQAxPyNNQonrqt-gDKL5AMvjmTan7Js1ef2tQxNSkOYbi8HrST9JRgsFZGeU1RMnh-jZSXRHyRR1pcrjeAulwvtwCTFWk_txDsORwTRVsuH_KlsWQCZh4EqPhAjJeQNEFeHoHSjwgABfY2kYyONhK8xG9fdqly25FGn_9CTWqSOPheSSDexdjNW5eTePCqDTRGEcl1HgB1VsgKxYwkzrU6AjcfAwlfiZW_UUkg_3LtMgplDh-xbKp1fE5a0WBH7Y6NLRaIeO85XlC2CGNuq7HVhqpaAGqayiWv6qhiOoosjoG4rhJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-C6U2APPPz3IxI7pD-cmL-S8SLieundPIS9cgQdL0Aun7tfFh1nshF6341j-1EaW794Vbke6jHtTir7agxZPQJuK1N7TGIpyX8Ta0eWBiHXB7HV21tktZ6npTel-anoyIaD5HnJRzlV2S98BN-dmk0iLWboMlJlyRpkoZ0oYgvzWY6F4y6G82-pEAW1Rylmryx3JfUe6QceeR9oU5TRb-6t2_w-JvjxuhjJa6tl1na4bBp4IQsEC7oTMDqTwwwBalVC6vhJ4oiry_ve_IlMVqT2_AUaPoOMjcHUOtLBBRyXoTolJ8t0OTXo9OpC63VNmp2BtlUKkJTLTgLldgzRkGp-Q87Mr1y7-sHLPxv0vIflPZP2B5yWyvMRN9SNBL979djszaqAmdGmnq4Ya-X9Q9WD7EbiqyP8evbzy9TPXr4BnH0FnjyfNYp1V5NKzL0CnBCyrIVYEsTx7irIS-l9ndlZP9Sfo5Q2wuDFjcd6YsziPP1-xrcil7u8V2cA_09Vx0xKetHlI_U4kfd9nvufwKGJWx4lc1-mGMLq6-dVLv_w9AGXzFRZxBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.765Z","timestamp":1788682709765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSTYgjVRd9yeT7QFwIOooLkSjSKJh0_Sfl7AZ_NjPdOj-M4ELeX6XfpFJVU-9VksnKdtR1L1yIIFRO0t2zkEFx4dZJuxOEKXDR4PRGcC0IMktJOk6LBXXvfec-7jv3cD6bFiekjYIev3s5nag4ppt-22q-ekMlIh3p5ta1pm21rQvNGyoJvAvN8TLkwzds12tbrzXfkbyfbjqWbVm2ZTffVrmM0vHmqguV3bNDvx14bdvutm3fwTj_L6KLBjRtQAxPyNNQonrqt-gDKL5AMvjmTan7Js1ef2tQxNSkOYbi8HrST9JRgsFZGeU1RMnh-jZSXRHyRR1pcrjeAulwvtwCTFWk_txDsORwTRVsuH_KlsWQCZh4EqPhAjJeQNEFeHoHSjwgABfY2kYyONhK8xG9fdqly25FGn_9CTWqSOPheSSDexdjNW5eTePCqDTRGEcl1HgB1VsgKxYwkzrU6AjcfAwlfiZW_UUkg_3LtMgplDh-xbKp1fE5a0WBH7Y6NLRaIeO85XlC2CGNuq7HVhqpaAGqayiWv6qhiOoosjoG4rhJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-C6U2APPPz3IxI7pD-cmL-S8SLieundPIS9cgQdL0Aun7tfFh1nshF6341j-1EaW794Vbke6jHtTir7agxZPQJuK1N7TGIpyX8Ta0eWBiHXB7HV21tktZ6npTel-anoyIaD5HnJRzlV2S98BN-dmk0iLWboMlJlyRpkoZ0oYgvzWY6F4y6G82-pEAW1Rylmryx3JfUe6QceeR9oU5TRb-6t2_w-JvjxuhjJa6tl1na4bBp4IQsEC7oTMDqTwwwBalVC6vhJ4oiry_ve_IlMVqT2_AUaPoOMjcHUOtLBBRyXoTolJ8t0OTXo9OpC63VNmp2BtlUKkJTLTgLldgzRkGp-Q87Mr1y7-sHLPxv0vIflPZP2B5yWyvMRN9SNBL979djszaqAmdGmnq4Ya-X9Q9WD7EbiqyP8evbzy9TPXr4BnH0FnjyfNYp1V5NKzL0CnBCyrIVYEsTx7irIS-l9ndlZP9Sfo5Q2wuDFjcd6YsziPP1-xrcil7u8V2cA_09Vx0xKetHlI_U4kfd9nvufwKGJWx4lc1-mGMLq6-dVLv_w9AGXzFRZxBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b058179af871be33eab6ae7abc44ce00\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/category-top-down251","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T08:18:13.497Z","timestamp":1788682693497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /category-top-down251 HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 08:18:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dgiecd5nkYnEHv%2Fa8vB8IEFjEbJ%2Fldxp%2FW2seUl0UTfjz8lxjJZSXQeqQqbWRonF%2BexYV%2BeBPXTF2diG63gYX2ad3eqtja6x5kLy%2BFfSY7r4I9vBAzMllQKTzC9Yh5JHvd%2FYOtP2ZqUP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a36c0ab25f540883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37007,"size_decoded":8002,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"dc74b1e026e235f93986cdc7b803c910","sha1":"ec7dbccacbd50bc7b276b1bc4032782cc56458ae","sha256":"4da8a4e4936f54ead03105c11a346671852d823fe779fed7cf5edb5dcbafefe9","sha512":"5ff62ba42f9b690b452b53594a9943ecda5a7319340f76c2555f178e6bbd5d818028777b17cbceee2f24923ced64a77039ba0d9d5ac194d38ce02c5e978e3c0e","ssdeep":"384:vrRii+slFGTddRC/GilRZ4dOR+tGGIB5FyYn7ag42m:Vii+slFiddRCei9E1tI1Pn7ag4Z","tlshash":"e2f29cb95afe0ce6219ba6e5c2e1b61c79625143f003bec878eceda5cfe2f40401b555","first_seen":"2026-09-06T08:18:49.32014Z","last_seen":"2026-09-06T08:18:49.32014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamshirt.com/17/5323869a8beda1d7db01e9c875b2f49f","fqdn":"mamshirt.com","domain":"mamshirt.com","tld":"com"},"ip":{"addr":"104.21.21.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.152Z","timestamp":1788682696152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamshirt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 16:05:40 GMT","end":"Thu, 26 Nov 2026 17:05:35 GMT"},"fingerprint":{"sha1":"BC:77:44:FD:F1:4E:49:75:F1:D1:4B:79:5E:0C:25:1B:61:78:53:C3","sha256":"27:14:1A:D5:8D:DC:F0:58:04:A8:C7:F1:58:29:46:06:3B:1D:5B:D4:A1:B5:75:53:59:6E:AA:82:C8:D7:D3:65"}}},"request":{"raw":"GET /17/5323869a8beda1d7db01e9c875b2f49f HTTP/1.1\r\nHost: mamshirt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nset-cookie: uidm=01a075cb-f605-7b65-97e9-f972e7969af0_1; Path=/; Expires=Wed, 03 Sep 2036 08:18:16 GMT; Secure; SameSite=None\n__cf_bm=H.SLcLrpcnZ2RQuqGJgJCPqKhq7LYlMs8fFINSyEDz8-1788682696.1750274-1.0.1.1-qfuJnHgtbjMN18a3FGYVQ5RVW8no4i7D3ZhBPE0YKFDgzv3DTq6lRkXO1z43NKyw9L7PzM9DNpDIEoOAGH1jP3F06nau5he2oUNTJiVSlWEQPG.hsmz3_DaP__80zV_m; HttpOnly; SameSite=None; Secure; Path=/; Domain=mamshirt.com; Expires=Sun, 06 Sep 2026 08:48:16 GMT\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Device-Stock-Ua\r\ncontent-encoding: gzip\r\nlink: \u003chttps://static.nresystems.com\u003e; rel=preconnect; crossorigin, \u003chttps://static.nresystems.com\u003e; rel=dns-prefetch\r\nvary: Accept-Encoding, Origin\r\nx-envoy-upstream-service-time: 5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, max-age=0, private, no-cache\r\nx-request-id: 9ef15300adcda19742b7f48cba1ce45e\r\npragma: no-cache\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\naccess-control-expose-headers: Content-Length,Content-Range\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36c0ac31edab51d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uidm","value":"01a075cb-f605-7b65-97e9-f972e7969af0_1","quoted":false,"path":"/","expires":"2036-09-03T08:18:16Z","raw_expires":"Wed, 03 Sep 2036 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uidm=01a075cb-f605-7b65-97e9-f972e7969af0_1; Path=/; Expires=Wed, 03 Sep 2036 08:18:16 GMT; Secure; SameSite=None"},{"name":"__cf_bm","value":"H.SLcLrpcnZ2RQuqGJgJCPqKhq7LYlMs8fFINSyEDz8-1788682696.1750274-1.0.1.1-qfuJnHgtbjMN18a3FGYVQ5RVW8no4i7D3ZhBPE0YKFDgzv3DTq6lRkXO1z43NKyw9L7PzM9DNpDIEoOAGH1jP3F06nau5he2oUNTJiVSlWEQPG.hsmz3_DaP__80zV_m","quoted":false,"path":"/","domain":"mamshirt.com","expires":"2026-09-06T08:48:16Z","raw_expires":"Sun, 06 Sep 2026 08:48:16 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=H.SLcLrpcnZ2RQuqGJgJCPqKhq7LYlMs8fFINSyEDz8-1788682696.1750274-1.0.1.1-qfuJnHgtbjMN18a3FGYVQ5RVW8no4i7D3ZhBPE0YKFDgzv3DTq6lRkXO1z43NKyw9L7PzM9DNpDIEoOAGH1jP3F06nau5he2oUNTJiVSlWEQPG.hsmz3_DaP__80zV_m; HttpOnly; SameSite=None; Secure; Path=/; Domain=mamshirt.com; Expires=Sun, 06 Sep 2026 08:48:16 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4366,"size_decoded":3937,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4366), with no line terminators","md5":"3f92423831b00e9cc87c6a59ec464321","sha1":"30f66ab401e083c92685e6d36a30b4db57739f5d","sha256":"3e50b41e687472282eccecba3f534875a40698fa505a5ab53f8b3302a205cbad","sha512":"df56340335fdbf62ccddccb4466794ac35efb5e38b89ab2944be49ad404fb5a61bc07f4dc469612c696b58b51a9afece584f142efe37826aec352a271d5bbb13","ssdeep":"96:W/rtQn/3vwBWR9CFijY/Fds0xlD4CEP8ocEn7DXeLIoz:W/r+feW2FWY/kTntcMDO9","tlshash":"a59174cd7f526085069154eb7b3f3944f0ad986475dbe4d4e028248abe1273bc0bba78","first_seen":"2026-08-25T13:48:10.059471Z","last_seen":"2026-09-07T11:17:22.458245Z","times_seen":518,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":8,"connect":5,"send":0,"wait":44,"receive":-1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026rb=e","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.154Z","timestamp":1788682696154,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026rb=e HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\npdhtkv49=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs49=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nu_pl29487205=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 25\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b9aa77119a3ca01caab151bd242ae76d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"pdhtkv49","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv49=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"u_pl29487205","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl29487205=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":14745,"size_decoded":11582,"mime_type":"application/json","magic":"JSON text data","md5":"70fd0e5e54d34040d1c708fade2824a5","sha1":"f4804e716e7edf29fe1563a7adc84cf32348ed0f","sha256":"b27aaef8cac0956db5f07f20374c99ff2dba197ed5fac926f85c97a736ec80de","sha512":"be204a322e07ad8205c63a5886ca9e1a2d864805bcba1aa1752844953eef38306636cfc6796792a835d9a07b0484eefb3c9c535a55e9ea6668a4aeeb6244dc20","ssdeep":"384:cm6QIhKId88VAvuEYSGH+NllR5C362s3fAqTw2dv2Sw:cdQIYWUvuENGSlzQK2sAqTw2dVw","tlshash":"8562c03c55aa8f1f5b4c490d308739ab3eab115f59802950fdfb95f4282a843ef89de4","first_seen":"2026-09-06T08:18:49.321388Z","last_seen":"2026-09-06T08:18:49.321388Z","times_seen":1,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":3,"connect":20,"send":0,"wait":56,"receive":20,"ssl":78},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/d0/32/98/d032982d4353406169d12d2e0ca297e2/1606921986.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.351Z","timestamp":1788682696351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/d0/32/98/d032982d4353406169d12d2e0ca297e2/1606921986.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14826\r\nserver: nginx/1.21.6\r\nlast-modified: Wed, 02 Dec 2020 15:13:14 GMT\r\netag: \"5fc7af0a-39ea\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14826,"size_decoded":15174,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"4a89df7b3215167e30683cdc76b2df50","sha1":"4b0fd1b03f46f24d51836e0ecf892014ac7de853","sha256":"e78389207c805394a9e4535e23eb775111540ee226c31901f45513b26f8a3dd7","sha512":"6c9f65bdd15c31bd3781ebcfaa4110848514508736a374050b611f8b4829a46cfb0d3fd40f9289d1af8299b76df1b6996f1aa75a44837aa0a1ba7fd2ae7aa237","ssdeep":"384:YGMvlru8BRhpRs+GcvOGlW1j26wvYGiOUk:YGMvlNBRts+HvOW6vOUk","tlshash":"9f62c06cdad60ae97f4d956700e35c20a4e9033332e647062bfa1da6c4daddc5ae83c5","first_seen":"2023-05-21T16:36:33Z","last_seen":"2026-09-21T10:07:27.318441Z","times_seen":225,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":33,"connect":20,"send":0,"wait":30,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitnh29eBBiEEGQViQouLPdPd090-YW_HHKrpqVCJ6quqpnK1vT1emqnpnMxV0jHjztwYMXoffNbvYWFIVcddaDIAjp24LZi_-AIEiOMpPBlRTU931Vr_jqvXr15WF1Tjqo6NkH1_VUKkU3oo7nvnFT5lyPjbu57fpex7vq3pR5HF51J4tQjt72u2HHe9N9X6S7eiPwfM_zPd99T5Yi05ONJQpZ3PeTqBOHHd_vd_wowKR8esdUDgx1wEfn5BIkb57_M_sUMp0jH373jjC7VhdvvTusFLW6xIiffJzv5nqcY3hRZqWDLD9ZnYY2DSHftKDzk5UK6NHRQgWYbEjrxUdg-cmKKtjo-AlbpiByMP4cxqM5hJpD0jlSfReSPyRAyrG5hXx4b1OXY3rnCUoXaEPa__wNOW5I-9Fl5MP715ScuDe0qqzUucEkqyEnc8jBHEV1CjttQY5PkdrPIfnvxGu9gnx4fJ1WJYXk9VK-zOagxkG1mNJBlbVQFS0M-ZlLk37Gkjikich6Gff8XkqjbjfphVGQxWmEKt2H5AdIyz0U5R525QEMd2BsQ5wP9zDi9TFXJjD1Pa5MxfxVDla5W8-0HRzSY20HIieg5QFKXh_J4ra5i9SuzaaZ4TO9CJTZekYZr2eSW4Ly9tnrnk-9XpSy9SyOovWeH3jrjHrpeuz1eiHLKA_C6CgztqoPi5Xtzs9_CeyKMzcRWRhy3u8G_W4ShzxOOIvTIGF-LHiUxDCyhjSt5eNMZUM-efAHCtkQ56UrYPQURp0ilWuglQ86rkF3akzzH3ZoPhjQoTCdgbQ7FetIDa5rFLYNe8eBsORQnZPLs4-2r_20NPXKj_sQ6W9kNZCWNYqyxi35C8FA7X-_VVg5lFO6cPmGpVY8Cyofbj1GKhvyzOPXlt_thc3PkBZ7MMV_nWbKFA3JLm3DaAJWrEFJAiUurqKshvnfml3Uh-YLDMo2mGrPmCrbR0yV6uuGiAcvLyh_teS96i7P3H4QeF7qBwlPojDp9jMRhX6vJyK_GwuvG8Ga5ta3r_767wBFjuN8CAQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.370Z","timestamp":1788682696370,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRitnh29eBBiEEGQViQouLPdPd090-YW_HHKrpqVCJ6quqpnK1vT1emqnpnMxV0jHjztwYMXoffNbvYWFIVcddaDIAjp24LZi_-AIEiOMpPBlRTU931Vr_jqvXr15WF1Tjqo6NkH1_VUKkU3oo7nvnFT5lyPjbu57fpex7vq3pR5HF51J4tQjt72u2HHe9N9X6S7eiPwfM_zPd99T5Yi05ONJQpZ3PeTqBOHHd_vd_wowKR8esdUDgx1wEfn5BIkb57_M_sUMp0jH373jjC7VhdvvTusFLW6xIiffJzv5nqcY3hRZqWDLD9ZnYY2DSHftKDzk5UK6NHRQgWYbEjrxUdg-cmKKtjo-AlbpiByMP4cxqM5hJpD0jlSfReSPyRAyrG5hXx4b1OXY3rnCUoXaEPa__wNOW5I-9Fl5MP715ScuDe0qqzUucEkqyEnc8jBHEV1CjttQY5PkdrPIfnvxGu9gnx4fJ1WJYXk9VK-zOagxkG1mNJBlbVQFS0M-ZlLk37Gkjikich6Gff8XkqjbjfphVGQxWmEKt2H5AdIyz0U5R525QEMd2BsQ5wP9zDi9TFXJjD1Pa5MxfxVDla5W8-0HRzSY20HIieg5QFKXh_J4ra5i9SuzaaZ4TO9CJTZekYZr2eSW4Ly9tnrnk-9XpSy9SyOovWeH3jrjHrpeuz1eiHLKA_C6CgztqoPi5Xtzs9_CeyKMzcRWRhy3u8G_W4ShzxOOIvTIGF-LHiUxDCyhjSt5eNMZUM-efAHCtkQ56UrYPQURp0ilWuglQ86rkF3akzzH3ZoPhjQoTCdgbQ7FetIDa5rFLYNe8eBsORQnZPLs4-2r_20NPXKj_sQ6W9kNZCWNYqyxi35C8FA7X-_VVg5lFO6cPmGpVY8Cyofbj1GKhvyzOPXlt_thc3PkBZ7MMV_nWbKFA3JLm3DaAJWrEFJAiUurqKshvnfml3Uh-YLDMo2mGrPmCrbR0yV6uuGiAcvLyh_teS96i7P3H4QeF7qBwlPojDp9jMRhX6vJyK_GwuvG8Ga5ta3r_767wBFjuN8CAQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6db75b80f872d7e2daeddaf97663bc02\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4tbVRS-yaRuXAiliCuJIqJiMu9nXp7dFX9s7IzaSgsicn9mbvPy3uu77yVpNjrWH9tZiLgRXr5kZrqQorhwqxlBRBD6dgN2Nv0HBEG6lGSCU3rhnnPudy73fufj-2JanJA2Cnr8zuVkoqOIbvptq_nSNR2LZGSaW1ebttW2Ljav6bjjXWyOlyEbvma7Xtt6ufmW5P1k07Fsy7Itu_mmzqRKxpurLnR61w79dsdr23a3bfsOxtnjiCk2YOgGxPCEnIcW1VMP1AfQfIF48P3r0vTzJH31jUER0TzJMBSH78f9OBnFGJyVKqtBxYfr20hMRcg3dSTx4XoKJMP5cgowXZH60_fB4sM1VbDh_ilbFkHGYOJJjIYLyGgBTRfgyW1ocY8AXGBrG_HgYCvJRvTWaZcuuxVp_PsP9KgijfsXEA_uXor0uHkliYpcJ7HBWJXQ4wV0b4G0WCCf1KFHR-D5p9DiT2LVn0U82L9Mi4xCi-MXLJtagc9ZS3X8sBXQ0GqFjPOW5wlhh1R1XY-tNNJqAWpqKJZb11CoOoq0joE4btKwq1jY8WgoVaCEZQec-q4bBp7vqA73UfBdaLEHnn1-kIqdvD-c51kh50XMzdS5cwp54Qo8WIJeOHW-Kz5KIyf0uoFj-VMbabZ7R7iBdBn3phR9vQcjzsHkFam9-zGGotwXkXFMeSAiUzB7nZ11dstZkvemdD_JezImoNkeMlHOdXrT3AbPN2YTZcQsWQbK8nJGmShnWuQE2c1HhaKi2wooY62uCkRLyUC5nmBdqZy5MnlRTtO1v2q__C3Rl8fNUKqlnl3X6bphxxOdULAOd0Jmd6Twww6MLqFNfSXwRFfk-k9_IdUVqT3zIhg9gomOwPUGaGGDjkrQnRKT-McdGvd6dCBNu6fznYK1dQKRlEjzBvJbNcicTKMTcmH23tVLP6_c87b-EpL_QdYLPCuRZiVu6F8JetHuD9tprgd6Qpd2upLTXD4Bqu9tPwTXFTn38PmVr1_5-kPw9BOY9P-XZpFJK6LOX4dJCFhaQ6QJInn2FWUlzCNndlZPzWfoZQ2wqDFjUdaYsyiLvlqxrYg82a-IfDBcVr_B6OOmJTxp85D6gZK-7zPfc7hSzAoc5bpON0RuqhvfPvf7fwMAErGPtHEEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.493Z","timestamp":1788682697493,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4tbVRS-yaRuXAiliCuJIqJiMu9nXp7dFX9s7IzaSgsicn9mbvPy3uu77yVpNjrWH9tZiLgRXr5kZrqQorhwqxlBRBD6dgN2Nv0HBEG6lGSCU3rhnnPudy73fufj-2JanJA2Cnr8zuVkoqOIbvptq_nSNR2LZGSaW1ebttW2Ljav6bjjXWyOlyEbvma7Xtt6ufmW5P1k07Fsy7Itu_mmzqRKxpurLnR61w79dsdr23a3bfsOxtnjiCk2YOgGxPCEnIcW1VMP1AfQfIF48P3r0vTzJH31jUER0TzJMBSH78f9OBnFGJyVKqtBxYfr20hMRcg3dSTx4XoKJMP5cgowXZH60_fB4sM1VbDh_ilbFkHGYOJJjIYLyGgBTRfgyW1ocY8AXGBrG_HgYCvJRvTWaZcuuxVp_PsP9KgijfsXEA_uXor0uHkliYpcJ7HBWJXQ4wV0b4G0WCCf1KFHR-D5p9DiT2LVn0U82L9Mi4xCi-MXLJtagc9ZS3X8sBXQ0GqFjPOW5wlhh1R1XY-tNNJqAWpqKJZb11CoOoq0joE4btKwq1jY8WgoVaCEZQec-q4bBp7vqA73UfBdaLEHnn1-kIqdvD-c51kh50XMzdS5cwp54Qo8WIJeOHW-Kz5KIyf0uoFj-VMbabZ7R7iBdBn3phR9vQcjzsHkFam9-zGGotwXkXFMeSAiUzB7nZ11dstZkvemdD_JezImoNkeMlHOdXrT3AbPN2YTZcQsWQbK8nJGmShnWuQE2c1HhaKi2wooY62uCkRLyUC5nmBdqZy5MnlRTtO1v2q__C3Rl8fNUKqlnl3X6bphxxOdULAOd0Jmd6Twww6MLqFNfSXwRFfk-k9_IdUVqT3zIhg9gomOwPUGaGGDjkrQnRKT-McdGvd6dCBNu6fznYK1dQKRlEjzBvJbNcicTKMTcmH23tVLP6_c87b-EpL_QdYLPCuRZiVu6F8JetHuD9tprgd6Qpd2upLTXD4Bqu9tPwTXFTn38PmVr1_5-kPw9BOY9P-XZpFJK6LOX4dJCFhaQ6QJInn2FWUlzCNndlZPzWfoZQ2wqDFjUdaYsyiLvlqxrYg82a-IfDBcVr_B6OOmJTxp85D6gZK-7zPfc7hSzAoc5bpON0RuqhvfPvf7fwMAErGPtHEEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: close\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platform,Device-Stock-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7d63ae2556ee195b06406eaf0fdff514\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/dd/8d/d0/dd8dd0c972d59e02c80133f11b3ae791/1779810153.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.347Z","timestamp":1788682696347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/dd/8d/d0/dd8dd0c972d59e02c80133f11b3ae791/1779810153.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 199151\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 26 May 2026 15:42:34 GMT\r\netag: \"6a15bf6a-309ef\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199151,"size_decoded":199500,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"27a6fd3b6d4aabf48728cc1df2d33682","sha1":"a11de1d6f89375ee2c7a39d36189a035a85636f0","sha256":"0e9f5967cc55f9af9eb2a74649356a95899afcc00a76ac84674f64b0425085ab","sha512":"300d2543fd6ad7a7a4ddd961b84ec75ad9961d3996abe8aac04ff6268e6ab547b0b6b7f1f219bb638d580b7fcec2a93defa612d37e9cfe1b5763831b701b1c24","ssdeep":"6144:DrYEt4S9ypa3Ida5i3PvtI2fIba1P3H6dYrHZ:XYiJyRda8fvtI9+1PK+r5","tlshash":"ad1412f1678528e1be9f162349a54e54cb22ef425c7f2bb16305589b14bc8f7abdc202","first_seen":"2026-05-31T20:05:13.610715Z","last_seen":"2026-09-21T11:14:22.180513Z","times_seen":130,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":36,"connect":20,"send":0,"wait":23,"receive":6,"ssl":269},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/ads-manager.js","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:13.991Z","timestamp":1788682693991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /ads-manager.js HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/category-top-down251\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 08:18:14 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtpaNt4OCLMGzfEFBGe2F53PSRVvObrj0VWGHjow2%2BgXpLwROjTGO5FgrmOcrk%2FasrVYOEpRpDULG1Fhfvdl4N1DdIUoV4bMbHT3GfZAYY4Q%2BaC2R5ZwEidPs66dcAOffvjFEe52mniF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"af1462d0aac8132009dcd34913587f63\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a36c0ab5789a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40133,"size_decoded":10630,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text, with very long lines (365)","md5":"23e4d0c13ee336c8251f0b6a7d198c94","sha1":"a68d801c380d526b1b66b1a49fabe5223d8abc50","sha256":"e0e28d3ea4329d9d2bb0b9fa4c3c759ecabbd5dcdf6f42a2f258add25a599393","sha512":"eb9bbfbb190ea182af40a22d87b7e469d1af8abc39b8621959157086f564037aedb30a524bd8ae2cbdec03a188cbbb1d58e1dcc8b25e4b994df83219a6b7eece","ssdeep":"768:WKVit2nD2u8wLJTvLE6b6OyOF/pJcIl6XHt3:WKVW2aJwwE6XHt3","tlshash":"ba0385092ef72031a11b80bd4f7792597a245407b007ddad7e9c92849fc8fe59db2be8","first_seen":"2026-09-06T04:02:35.150725Z","last_seen":"2026-09-07T05:25:38.953083Z","times_seen":11,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.143Z","timestamp":1788682694143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164917\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-23T03:00:38.047576Z","times_seen":55711,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/61/7e/8d/617e8d79076c32f6586d32c616add42a/1708430700.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.426Z","timestamp":1788682696426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/61/7e/8d/617e8d79076c32f6586d32c616add42a/1708430700.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27545\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 20 Feb 2024 12:05:09 GMT\r\netag: \"65d49575-6b99\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27545,"size_decoded":27893,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"9024e9be7d9864e41192d5fa26870059","sha1":"e2b905f7ad4062465a8f8fce47a4ec9aa7dc7da7","sha256":"154922132167bd323ba369b348e144c95ec9005e20b7d75ceac103c0979d0b72","sha512":"2f2e0f2517d51657ad17297c2ebeb7e7842c817a8b25b9816250d56f4f4a70cb79810e4103c94e5e4d5ae31ed37082855bdc824b6a7cbb027e7d14b7752a7820","ssdeep":"768:YGs5DD8+2sl24vfMmutTucukvl/b7XKnW7cl6:YGQDj2scgfMFa2pbtcE","tlshash":"06c2e004877572c8e9826eb540092c1695cebff212d3b3503ac6768f6cee9ad5c10d76","first_seen":"2024-03-13T02:21:35Z","last_seen":"2026-09-21T03:07:51.212216Z","times_seen":184,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":79,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSzYsj1Rd9yYTfb-FCkGFwIRJBRNFkqipVqdTMbvBjM9MtzsgILvR9pl-nUlVT71WSycqeUdctuHAjVE7S3bOQQXExW027EARhatfg9MZ_QBDEpSQdbPXBu_e-ey_3nXs4n86KU9JGQU_evpFOdRzTy0Hbab58WyciHZvm1q2m67Sdq83bOun6V5uTlclHV9yO33Zeab4l-SC97Dmu47iO23xT51Klk8vrKnT20I2Cdtdvu26v7QYeJvl_M6aow9A6xOiUPAMtqqd_Ve9D8yWS4devSzOwafbaG8MipjbNMRJH7yaDJB0nGJ6HKq9BJUebbqSmIuSLOtLkaLMF0tFitQWYrkj90hOw5GgDFWx0cIaWxZAJmHgK49ESMl5C0yV4eh9aPCYAF9jaRjI83ErzMb17VqWrakUaf_wOPa5I48lFJMOH12I9ad5M48LqNDGYqBJ6soTuL5EVS9hpHXp8DG7vQYufiVN_Hsnw4AYtcgotTl50XOqEAWct1Q2iVkgjpxUxzlu-L4QbUdXr-GzNkVZLUFNDsbq6hkLVUWR1DMVJk0Y9xaKuTyOpQiUcN-Q06HSi0A881eUBCr4HLfbB808WRcLNzH2QiR07GPnRwuaFPFwl_WjmflV8kMVe5PdCzwlm7uFZ17oHWb73QHRC2WHcn1EM9D6MqMFYgpEoD0RsPFMeitgUzN14b-M75Ty1_Rk9SG1fJgQ030cuyoXO7pj74PbCfKqMmKcrQ5kt55SJcq6FJcjv_Isk6rXCruO1etJXLV-pKPRCNxRCLJSxRTnLNtqqff-bxECeNCOpVlz2Ol6vE3V90Y0E63IvYm5XiiDqwugS2tTX5E51Rd579AsyXZHasy-B0WOY-BhcXwAtXNBxCbpTYpp8u0OTfp8OpWn3td0pWFunEGmJzDZg79YgLZnFp-Ti_J1b175bK0c-ugTJfyKbA56XyPISu_oHgn689812ZvVQT-lKSjcttfJ_oPrx9p_guiKX_n9vrekrz70Knn0Ek_09aR6brCLXd3dgUgKW1RBrglief0VZCfOPNzuPZ-Zj9PMGWNyYszhvLFicx5-v0Vbk-oefrQevTAajT5qO8KXLIxqESgZBwALf40oxJ_RUp-P1IlhT7X75wo9_DQDAuOSKbQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.433Z","timestamp":1788682696433,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSzYsj1Rd9yYTfb-FCkGFwIRJBRNFkqipVqdTMbvBjM9MtzsgILvR9pl-nUlVT71WSycqeUdctuHAjVE7S3bOQQXExW027EARhatfg9MZ_QBDEpSQdbPXBu_e-ey_3nXs4n86KU9JGQU_evpFOdRzTy0Hbab58WyciHZvm1q2m67Sdq83bOun6V5uTlclHV9yO33Zeab4l-SC97Dmu47iO23xT51Klk8vrKnT20I2Cdtdvu26v7QYeJvl_M6aow9A6xOiUPAMtqqd_Ve9D8yWS4devSzOwafbaG8MipjbNMRJH7yaDJB0nGJ6HKq9BJUebbqSmIuSLOtLkaLMF0tFitQWYrkj90hOw5GgDFWx0cIaWxZAJmHgK49ESMl5C0yV4eh9aPCYAF9jaRjI83ErzMb17VqWrakUaf_wOPa5I48lFJMOH12I9ad5M48LqNDGYqBJ6soTuL5EVS9hpHXp8DG7vQYufiVN_Hsnw4AYtcgotTl50XOqEAWct1Q2iVkgjpxUxzlu-L4QbUdXr-GzNkVZLUFNDsbq6hkLVUWR1DMVJk0Y9xaKuTyOpQiUcN-Q06HSi0A881eUBCr4HLfbB808WRcLNzH2QiR07GPnRwuaFPFwl_WjmflV8kMVe5PdCzwlm7uFZ17oHWb73QHRC2WHcn1EM9D6MqMFYgpEoD0RsPFMeitgUzN14b-M75Ty1_Rk9SG1fJgQ030cuyoXO7pj74PbCfKqMmKcrQ5kt55SJcq6FJcjv_Isk6rXCruO1etJXLV-pKPRCNxRCLJSxRTnLNtqqff-bxECeNCOpVlz2Ol6vE3V90Y0E63IvYm5XiiDqwugS2tTX5E51Rd579AsyXZHasy-B0WOY-BhcXwAtXNBxCbpTYpp8u0OTfp8OpWn3td0pWFunEGmJzDZg79YgLZnFp-Ti_J1b175bK0c-ugTJfyKbA56XyPISu_oHgn689812ZvVQT-lKSjcttfJ_oPrx9p_guiKX_n9vrekrz70Knn0Ek_09aR6brCLXd3dgUgKW1RBrglief0VZCfOPNzuPZ-Zj9PMGWNyYszhvLFicx5-v0Vbk-oefrQevTAajT5qO8KXLIxqESgZBwALf40oxJ_RUp-P1IlhT7X75wo9_DQDAuOSKbQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: af9173bb1ca48f627c472a41c7580ea0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/9d/d7/bf/9dd7bff1c3a2e52b19c32161d7eab721/1708427871.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.483Z","timestamp":1788682697483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/9d/d7/bf/9dd7bff1c3a2e52b19c32161d7eab721/1708427871.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20278\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 20 Feb 2024 11:17:59 GMT\r\netag: \"65d48a67-4f36\"\r\nexpires: Tue, 08 Sep 2026 08:18:17 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20278,"size_decoded":20626,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"114fb38d376d879cafb1cba795d827c4","sha1":"abf5e5e183959c3af40d5a9e871be7e1d2d09337","sha256":"9a7539ae4dbf7a1b97649d85b71c0c11f161f4bdcf9a4f3e53f6c82a5c1d1bfb","sha512":"5b341305cec9d4dd70a8ee69c53103882fb98bf79166bf3405b3481996a8cfc6ede958a6ec399f010f63b6ac12baa80c88569f3ab717cdc10dbd2f8697bb43ca","ssdeep":"384:YATjciTN0U1RO00t3djmToMEOfjUFYMm0llsKqHhi0WRpgGKsb/5laWzH1Iz:YAvxErZRmAYMPlqri0WMsbXHC","tlshash":"0a92d194f6243474ba364a3edd0dac2351d77b721bc5471346f0e38de0841989aee778","first_seen":"2024-05-19T12:53:22Z","last_seen":"2026-09-20T23:56:02.196812Z","times_seen":163,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/js/jquery.min.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.724Z","timestamp":1788682704724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/js/jquery.min.js HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 08:18:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-15d94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 486399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jU4yWagGv9Q%2FYQoUCU%2B5o5qF8oX%2FqH3DSX4obNy3szlERrHG%2FsAP1uEVUKQK7nFkftBpjZEpDExsSqwuhvmaxvQ5rFjJXHR%2BlenyRlvXqyuuXc9snmJy%2BSNNcyp7MhrhuJ84HYttVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36c0af88e3c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 89492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89492,"size_decoded":90347,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-09-22T22:32:22.464681Z","times_seen":8981,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/js/script.js","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.771Z","timestamp":1788682704771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/js/script.js HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 08:18:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-478\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztHl9BiYXliDL0xv50uI1POjw0PxBJxLgp9IdMfO7IslF1FWb5qttLtBX7nTgj3iq4aRLXhZDBhA0SlG3LLSc3CP9LjHtDXZspv7N7PzNAm7i3ZHUNQ4ibOX0J9gNwbfMGflnqbCgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36c0af8de457131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":1972,"mime_type":"application/javascript","magic":"ASCII text","md5":"cc851ecae9979c9cb7d86725f8202ab2","sha1":"168c8c343143c6bd39486f20039ca3c4bbaa966c","sha256":"ca338eeb72736d653e58065bf3a80eb1f26b1879da62fc62065e53b8049c19bb","sha512":"557abab1e46c94d058a4d6678671f70aa10ff2e2e270bf3afe44508a75d3dd062a8ef44369f777bfb0aa7ba9d18a6603b110e86bbfa002bec2b6a65797473480","ssdeep":"","tlshash":"4321bb23316c42a45313f027521b6aceba32059bad2a972a312c16cd0fc077903f9af2","first_seen":"2023-12-10T19:25:32Z","last_seen":"2026-09-22T18:31:49.678353Z","times_seen":1444,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xST4gjxReuZPP7gXgQZBUPIhFkUDGZ_p-0e1v8c9mdUXdlBQ9S_zpTm053b1d1ks1Fx1XPc1AQQeh8yczsQRbFg1cn400QtsHDgDsXwbMgiAcPkkzYEQvqvVfvPV597-P7ZFqckjYKevLG1XSi4phu-m2r-fwNlYh0pJtb15u21bYuNW-oJPAuNcdLkw9ftl2vbb3QfF3yfrrpWLZl2ZbdfE3lMkrHm6sqVHbPDv124LVtu9u2fQfj_L8ZXTSgaQNieEoehxLVY79G70LxBZLB169I3Tdp9tKrgyKmJs0xFIdvJ_0kHSUYnIdRXkOUHK67keqKkM_rSJPD9RZIh_PlFmCqIvUnH4Alh2uoYMP9M7QshkzAxKMYDReQ8QKKLsDTO1DiPgG4wNY2ksHBVpqP6O2zKl1WK9L48w-oUUUaDy4iGdy7HKtx81oaF0alicY4KqHGC6jeAlmxgJnUoUbH4OZDKPETserPIBnsX6VFTqHEyXOWTa2Oz1krCvyw1aGh1QoZ5y3PE8IOadR1PbbiSEULUF1DsbyqhiKqo8jqGIiTJg27EQsDj4Yy6kTCsjuc-q4bdjzfiQLuo-C7UGIPPP_4oEi49sKp-1XxXhY7odftOJY_tQ8ysWP6w7nJCzlf9kzdu2cpL1wlkeW7d4XbkS7j3pSir_agxSPQpiK1NzWGotwXsXZ0eSBiXTB77Z21d8tZanpTup-ankwIaL6HXJRzld3Sd8DNhdkk0mKWLg1lppxRJsqZEoYgv_WQKN5yKO-2OlFAW5Ry1upyR3LfkW7QseeRNkU5zdb6qh39LtGXJ81QRks-u67TdcPAE0EoWMCdkNmBFH4YQKsSStdXBE9URd757hdkqiK1pzbA6DF0fAyuLoAWNuioBN0pMUm-3aFJr0cHUrd7yuwUrK1SiLREZhowt2uQhkzjU3Jx9tb1y9-v1HOl-xsk_5GsD3heIstL3FQ_EPTi3W-2M6MGakKXcrpmqJH_B1X3t_8CVxX539-frXT94vtH4NkH0NnDSbNYZxXZQAadErCsjlgRxPL8K8pK6H-92Xk81R-hlzfA4saMxXljzuI8_rQiG0dfrCCvBlfkyhNPQ6uTZtdxLIvbTihC3wvdbiR9z-50pG-7gbRcH0ZXN7989ud_BgACdMpocQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.770Z","timestamp":1788682709770,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xST4gjxReuZPP7gXgQZBUPIhFkUDGZ_p-0e1v8c9mdUXdlBQ9S_zpTm053b1d1ks1Fx1XPc1AQQeh8yczsQRbFg1cn400QtsHDgDsXwbMgiAcPkkzYEQvqvVfvPV597-P7ZFqckjYKevLG1XSi4phu-m2r-fwNlYh0pJtb15u21bYuNW-oJPAuNcdLkw9ftl2vbb3QfF3yfrrpWLZl2ZbdfE3lMkrHm6sqVHbPDv124LVtu9u2fQfj_L8ZXTSgaQNieEoehxLVY79G70LxBZLB169I3Tdp9tKrgyKmJs0xFIdvJ_0kHSUYnIdRXkOUHK67keqKkM_rSJPD9RZIh_PlFmCqIvUnH4Alh2uoYMP9M7QshkzAxKMYDReQ8QKKLsDTO1DiPgG4wNY2ksHBVpqP6O2zKl1WK9L48w-oUUUaDy4iGdy7HKtx81oaF0alicY4KqHGC6jeAlmxgJnUoUbH4OZDKPETserPIBnsX6VFTqHEyXOWTa2Oz1krCvyw1aGh1QoZ5y3PE8IOadR1PbbiSEULUF1DsbyqhiKqo8jqGIiTJg27EQsDj4Yy6kTCsjuc-q4bdjzfiQLuo-C7UGIPPP_4oEi49sKp-1XxXhY7odftOJY_tQ8ysWP6w7nJCzlf9kzdu2cpL1wlkeW7d4XbkS7j3pSir_agxSPQpiK1NzWGotwXsXZ0eSBiXTB77Z21d8tZanpTup-ankwIaL6HXJRzld3Sd8DNhdkk0mKWLg1lppxRJsqZEoYgv_WQKN5yKO-2OlFAW5Ry1upyR3LfkW7QseeRNkU5zdb6qh39LtGXJ81QRks-u67TdcPAE0EoWMCdkNmBFH4YQKsSStdXBE9URd757hdkqiK1pzbA6DF0fAyuLoAWNuioBN0pMUm-3aFJr0cHUrd7yuwUrK1SiLREZhowt2uQhkzjU3Jx9tb1y9-v1HOl-xsk_5GsD3heIstL3FQ_EPTi3W-2M6MGakKXcrpmqJH_B1X3t_8CVxX539-frXT94vtH4NkH0NnDSbNYZxXZQAadErCsjlgRxPL8K8pK6H-92Xk81R-hlzfA4saMxXljzuI8_rQiG0dfrCCvBlfkyhNPQ6uTZtdxLIvbTihC3wvdbiR9z-50pG-7gbRcH0ZXN7989ud_BgACdMpocQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 9\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d53d96ed1c390330d7d12d9363bf8e94\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.145Z","timestamp":1788682694145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164917\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-23T03:00:38.047576Z","times_seen":55711,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":21,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026uuid=01a075cb-f659-7a90-9bcc-44dd19af834b%3A1%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22a%22%7D\u0026rb=e","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.339Z","timestamp":1788682696339,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026uuid=01a075cb-f659-7a90-9bcc-44dd19af834b%3A1%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22a%22%7D\u0026rb=e HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs=2; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\nuncs49=2; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 16\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5e7d35504edffbc38608f55cd7667727\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-7a90-9bcc-44dd19af834b:1:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:16Z","raw_expires":"Sun, 13 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs","value":"2","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=2; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"2","quoted":false,"path":"/","expires":"2026-09-07T08:18:16Z","raw_expires":"Mon, 07 Sep 2026 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=2; Path=/; Expires=Mon, 07 Sep 2026 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15596,"size_decoded":16764,"mime_type":"application/json","magic":"JSON text data","md5":"8538cb83c75767e497cddfb99babad38","sha1":"a7fc88d8fd3f1e367e6cdf3983daf470b9953dee","sha256":"f468394d8eff9a0b1c0363e441cdc15501c55bcd083745fb5562aa2e39abd1e6","sha512":"b57270e8e1fbde6da8e312cd364ba0197110cc752b5c31c860c3a90aeb1d901b33057855018df9a91fdb18d4162460c48dd38d5b28a01d53bcc0107e795dbf47","ssdeep":"384:MIOgdIv1OESvn467DhrxdQHgjbao1GMnUypwd2ZFMNzGGo:MIOQIv1OESjxOHStGe/CdQFe7o","tlshash":"4962d03712ec85cdce9e7f235cab55421f55422bc064d83ab9f0eba81c3b4a62d2975c","first_seen":"2026-09-06T08:18:49.327877Z","last_seen":"2026-09-06T08:18:49.327877Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/e8/d8/97/e8d8975e7508c9d5876bdbc1ce185c36/1780997957.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.355Z","timestamp":1788682696355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/e8/d8/97/e8d8975e7508c9d5876bdbc1ce185c36/1780997957.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 120800\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 09 Jun 2026 09:39:17 GMT\r\netag: \"6a27df45-1d7e0\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120800,"size_decoded":121149,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"3d953cc67faa06261e1f8fc6e42ae3b4","sha1":"2ea6a8bffe45af90a06929652db6bd7a25f2ff02","sha256":"2de95116b4f16205fdb3e498b875b43b2df372ca42609dd8782cc64bd58d36a1","sha512":"9833f546f340ce565ea65c743820dffd391a1f429740c0ab3223c742c78b6ef099b9d651ea827a31b9bdb7758c195a128aedec1098e625825da1360d432df9cb","ssdeep":"3072:Nun27BYiG5pHdlcReRVPD2H4tn0R5Ws5bmDf0wibTD3TiY/:NubiUHdlpVPSH4t0qem70wibTD2Y/","tlshash":"21c3120935e1f8f26d782cd509954c81d73ffcd9fd388b86f743019e5525a6e980aa83","first_seen":"2026-07-15T20:06:44.553125Z","last_seen":"2026-09-21T11:13:10.17955Z","times_seen":140,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":29,"connect":20,"send":0,"wait":19,"receive":4,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz2skRRitngxe9iDIIh5EWhBRMJPunu6eaeNp8cdBNlE3soIHqV89qU1PV6eremZ2TllXPOfgwYvQeZNsboviYa86EREEYfsgBNx42H9AEMSjzOxgxIL6vq_qFV-9V68-P6ouSAcVPX_vup6qLKMbUcdzX7mpcqHHxt3acX2v4226N1Ueh5vuZBHK0et-N-x4r7rvSL6nNwLP9zzf8923VSlTPdlYolDFfT-JOnHY8f1-x48CTMr_75jKgaEOxOiCPAMlmqcfpx9D8Tny4ddvSrNndfHaW8Mqo1aXGInTD_O9XI9zDC_LtHSQ5qer09CmIeTLFnR-ulIBPTpeqABTDWk9-wgsP11RBRudPGHLMsgcTFzBeDSHzOZQdA6u70KJhwTgAlvbyIf3tnQ5prefoHSBNqT9159Q44a0H11FPrx_LVMT94bOKqt0bjBJa6jJHGowR1GdwU5bUOMzcPsplPiFeK0XkA9PrtOqpFCiXspX6RzUOKgWUzmo0haqooWhOHdp0k9ZEoc0kWkvFZ7f4zTqdpNeGAVpzCNU_A6UOAQvD1CUB9hThzDCgbENcd4_wEjUJyIzganvicxUzF_lYJW79UzbwRE90XYgcwJaHqIU9bEq9s1dcLs2m6ZGzPQiUGbrGWWinilhCcr985c8n3q9iLP1NO7113t-EKwzL-DrVPCURv0oZowep8ZW9VGxst35_g-JPXnuJjINQyH63aDfTeJQxIlgMQ8S5sdSREkMo2oo01o-zlQ15KMHv6FQDXGeexmMnsFkZ-BqDbTyQcc16G6Naf7tLs0HAzqUpjNQdrdiHaUhdI3CtmFvO5CWHGUX5Orsg51r3y1NfeP3HyH5z2Q1wMsaRVnjlvqBYJDd-Wa7sGqopnTh8g1LrXwKVD3c_htcNeTK84-X38399RPw4gCm-LfTLDNFQzabfRhNwIo1ZIogk5dXUVbD_GfNLusj8xkGZRssa89YVraPWVZmXzREPthZhHeXvFfd1bnbDwLP436QiCQKk24_lVHo93oy8rux9LoRrGluffXiT_8MAKsvbFAIBAAA","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.407Z","timestamp":1788682696407,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz2skRRitngxe9iDIIh5EWhBRMJPunu6eaeNp8cdBNlE3soIHqV89qU1PV6eremZ2TllXPOfgwYvQeZNsboviYa86EREEYfsgBNx42H9AEMSjzOxgxIL6vq_qFV-9V68-P6ouSAcVPX_vup6qLKMbUcdzX7mpcqHHxt3acX2v4226N1Ueh5vuZBHK0et-N-x4r7rvSL6nNwLP9zzf8923VSlTPdlYolDFfT-JOnHY8f1-x48CTMr_75jKgaEOxOiCPAMlmqcfpx9D8Tny4ddvSrNndfHaW8Mqo1aXGInTD_O9XI9zDC_LtHSQ5qer09CmIeTLFnR-ulIBPTpeqABTDWk9-wgsP11RBRudPGHLMsgcTFzBeDSHzOZQdA6u70KJhwTgAlvbyIf3tnQ5prefoHSBNqT9159Q44a0H11FPrx_LVMT94bOKqt0bjBJa6jJHGowR1GdwU5bUOMzcPsplPiFeK0XkA9PrtOqpFCiXspX6RzUOKgWUzmo0haqooWhOHdp0k9ZEoc0kWkvFZ7f4zTqdpNeGAVpzCNU_A6UOAQvD1CUB9hThzDCgbENcd4_wEjUJyIzganvicxUzF_lYJW79UzbwRE90XYgcwJaHqIU9bEq9s1dcLs2m6ZGzPQiUGbrGWWinilhCcr985c8n3q9iLP1NO7113t-EKwzL-DrVPCURv0oZowep8ZW9VGxst35_g-JPXnuJjINQyH63aDfTeJQxIlgMQ8S5sdSREkMo2oo01o-zlQ15KMHv6FQDXGeexmMnsFkZ-BqDbTyQcc16G6Naf7tLs0HAzqUpjNQdrdiHaUhdI3CtmFvO5CWHGUX5Orsg51r3y1NfeP3HyH5z2Q1wMsaRVnjlvqBYJDd-Wa7sGqopnTh8g1LrXwKVD3c_htcNeTK84-X38399RPw4gCm-LfTLDNFQzabfRhNwIo1ZIogk5dXUVbD_GfNLusj8xkGZRssa89YVraPWVZmXzREPthZhHeXvFfd1bnbDwLP436QiCQKk24_lVHo93oy8rux9LoRrGluffXiT_8MAKsvbFAIBAAA HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 340c8b3c000bda0e687cfa256ca16b0b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/76/fb/3d/76fb3d2d2d0a1dc0b0d81ef60b7f44e7/1606718751.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.758Z","timestamp":1788682709758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/76/fb/3d/76fb3d2d2d0a1dc0b0d81ef60b7f44e7/1606718751.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16317\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 30 Nov 2020 06:45:58 GMT\r\netag: \"5fc49526-3fbd\"\r\nexpires: Tue, 08 Sep 2026 08:18:29 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16317,"size_decoded":16665,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3","md5":"37b4cdc1b5b904ac9e2297d4a1c35170","sha1":"1751df37a6c92374e64617da51f5a0a3160b4789","sha256":"b625540b5f1178f5267139998eeb0ab2d0d05e73b3ad44ead44506e765a4f44d","sha512":"6c94f4eda5a1f9a2b54ba64eef85a802af95699a969ae1847a9bb8299887e6107ffbad90bb5a137cf773f3c32e59dba3ad31fee9ed0dfd5a4ce1269b4da9880c","ssdeep":"384:YcJSeM/yhSKUklQVVhTILzoMFslQhxuV945q1XHERZ4NRtqWUTnV0SDKn9uR:YcJSekI2rTwzlNuQKXHER6vUTVB+gR","tlshash":"8c72d1134e22c6c3f8c7b0618a4dbcbf40e570a59cba80766dd670c3a47b99488f61dd","first_seen":"2023-05-07T21:32:46Z","last_seen":"2026-09-21T11:13:40.31812Z","times_seen":138,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/ren.gif?sid=H4sIAAAAAAAC_1ySTYgcxRvGqyd7y-EPf0LwYhxBRMGZdPXH9LQ5BIIfp2yMG8khB6mvnlSmp7vT1T0zGRASY7yIsN48GOx5ZnZXRIKChz2pzHoQVgT7IMwhC-LRiyB48iCzOxiwDu9bPE9BPe_L7_1peUTaKNnyjcvpRMcxO--37eYL13Ui05Fpbl5rUrttX2he10nHu9Acr0o-fJm6Xtt-sfm6Ev30vGNT26Y2bb6mcxWl4_PHLnT2iIZ-u-O1Ke22qe9gnP9XMWUDhlmQwyPyf2hZ_--36Aa0WCAZfPmKMv0izV56dVDGrEhzDOXeW0k_SUcJBk-uUW4hSvbWr5GampCPG0iTvfUUSIfz1RTguiaNs4_Bk711VPDhzklaHkMl4PI0RsMFVLyAZguI9D60_JkAQmLzCpLB7maaj9idE5et3Jps_PUn9KgmG4_PIBk8uhTrcXMrjctCp4nBOKqgxwvo3gJZeYBi0oAeHUAU70LLn4jdOIdksHOZlTmDlsvnbMrswBe8FXX8sBV0wqjFXOm0ZNeXNvcdV3Xs4x3paAFmGiiNhVJbKKMGyqyBgVw2WdiNeNjxWKiiIJI2DQTzXTcMPN-JOsJHKe5By22I_MFuJm8W_eG8yEs1LxNhpvSzE8lxj8Xdlei4U_pF-XYWO6HXDRw7mFJk-V309TaMPAVT1MS6-g6GstqRsXFMtStjU3K67s66u9UsLXpTtpMWPZUQsHwbuazmOrtt7kMUp2aTyMhZuiqMF9WMcVnNtCwI8tv_bke07MCnraDjOi3uuUGr0-14gkYsckJ_HpmirKbZGipruUXQV8tmt9vtMhqKDqPUoxF1GGe27Qgv7Ho85CGMrqANATMWJromN359iEzXxHrqeXB2ABMfQOhTYOXTYKMK7GaFSbI_UANl0jKRZpImqp2xnjJtqYaQaYWs2EBxx4IqyDQ-Imdmb1679N0xN71PUihxePHvT78Z_vB1CJFXyPIKt_T3BL343ldXskIP9IStQNoqWKE2wHRNTn_wDISuydnPk2OmL7QuQ2R3YbLDi0f7V39_cG5_FpusJurDX2BSAp5ZiDVBrA7J-oDxCkY9-Zyrw2__OPGm5j30cgs8tmY8zq05j_P4o5O8Ri-btvQUFSHzg0j5vs99zxFRxO3AiVzX6YYoTH3r4bM__jMAaE-PY14EAAA=","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:20.908Z","timestamp":1788682700908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1ySTYgcxRvGqyd7y-EPf0LwYhxBRMGZdPXH9LQ5BIIfp2yMG8khB6mvnlSmp7vT1T0zGRASY7yIsN48GOx5ZnZXRIKChz2pzHoQVgT7IMwhC-LRiyB48iCzOxiwDu9bPE9BPe_L7_1peUTaKNnyjcvpRMcxO--37eYL13Ui05Fpbl5rUrttX2he10nHu9Acr0o-fJm6Xtt-sfm6Ev30vGNT26Y2bb6mcxWl4_PHLnT2iIZ-u-O1Ke22qe9gnP9XMWUDhlmQwyPyf2hZ_--36Aa0WCAZfPmKMv0izV56dVDGrEhzDOXeW0k_SUcJBk-uUW4hSvbWr5GampCPG0iTvfUUSIfz1RTguiaNs4_Bk711VPDhzklaHkMl4PI0RsMFVLyAZguI9D60_JkAQmLzCpLB7maaj9idE5et3Jps_PUn9KgmG4_PIBk8uhTrcXMrjctCp4nBOKqgxwvo3gJZeYBi0oAeHUAU70LLn4jdOIdksHOZlTmDlsvnbMrswBe8FXX8sBV0wqjFXOm0ZNeXNvcdV3Xs4x3paAFmGiiNhVJbKKMGyqyBgVw2WdiNeNjxWKiiIJI2DQTzXTcMPN-JOsJHKe5By22I_MFuJm8W_eG8yEs1LxNhpvSzE8lxj8Xdlei4U_pF-XYWO6HXDRw7mFJk-V309TaMPAVT1MS6-g6GstqRsXFMtStjU3K67s66u9UsLXpTtpMWPZUQsHwbuazmOrtt7kMUp2aTyMhZuiqMF9WMcVnNtCwI8tv_bke07MCnraDjOi3uuUGr0-14gkYsckJ_HpmirKbZGipruUXQV8tmt9vtMhqKDqPUoxF1GGe27Qgv7Ho85CGMrqANATMWJromN359iEzXxHrqeXB2ABMfQOhTYOXTYKMK7GaFSbI_UANl0jKRZpImqp2xnjJtqYaQaYWs2EBxx4IqyDQ-Imdmb1679N0xN71PUihxePHvT78Z_vB1CJFXyPIKt_T3BL343ldXskIP9IStQNoqWKE2wHRNTn_wDISuydnPk2OmL7QuQ2R3YbLDi0f7V39_cG5_FpusJurDX2BSAp5ZiDVBrA7J-oDxCkY9-Zyrw2__OPGm5j30cgs8tmY8zq05j_P4o5O8Ri-btvQUFSHzg0j5vs99zxFRxO3AiVzX6YYoTH3r4bM__jMAaE-PY14EAAA= HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:20 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5bc82b2a37c24b8e7dee32acf209a7d9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:20.905Z","timestamp":1788682700905,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 220\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":220,"data":"[{\"placement_key\":\"8888a19c6a1141f12aba002c4984b9b9\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a075cc-051b-7043-88a1-a72e34f5c1e0\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:20 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1570,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.719Z","timestamp":1788682704719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 06 Sep 2026 08:18:24 GMT\r\ndate: Sun, 06 Sep 2026 08:18:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":2503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b3aa47c04f634f874e9fe24da03e44c2","sha1":"d6233fb889991ce8ab543cf6a3dedfa597e8c8bd","sha256":"1c87a812c578a613533eee262e5564ff39d369f62a5d9d8f0cda4daf92755241","sha512":"930654c03131317f868a8b908537b51f208c654d835caa93d129f0371820222f21a88cca41646271d967b881c7b44a65f8b0b699555d51b43cb8e2f93b831b18","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKj:Xxyll3","tlshash":"2ec210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.045053Z","last_seen":"2026-09-22T18:31:49.672407Z","times_seen":5246,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/16/52/13/1652137a47f569a3a84e1ab3add3445c/1784628495.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.723Z","timestamp":1788682704723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/16/52/13/1652137a47f569a3a84e1ab3add3445c/1784628495.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2066\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 21 Jul 2026 10:08:15 GMT\r\netag: \"6a5f450f-812\"\r\nexpires: Tue, 08 Sep 2026 08:18:24 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2066,"size_decoded":2412,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 149x149, components 3","md5":"fa410e41a8bf3012334c53eb381f38d1","sha1":"74f3051213aa6e459162848585e4b3500c8f7e1b","sha256":"1b65e71238d9ab462b8349874cf0102ed1425d6736b5e3d7ac93e8af6e1d3326","sha512":"7d97160375e0c9acb3c73aac111b0d3326d1b7e5846f43969ee1a2bedba2962313fdce1d94e75ec279822e7e902f5833ca83d055d8703db4d1aecd312abfa116","ssdeep":"","tlshash":"dd412a2a9b140c5df534a63a4398329f921a3bc1dc8baa2372c34d14127b0730bea7c5","first_seen":"2026-07-21T12:24:06.10225Z","last_seen":"2026-09-22T18:31:49.689343Z","times_seen":1261,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSzYscxRuungy_38GDEEIQFGlBgoI7293T3bOd3IIfp-yqWYngqT66Zivb09Xpqp6ZzGk3EQ-e9uDBi9DzzG72FhSFXHXWgyAI6duA2Yv_gCCIR5nJ4IoF9b5v1Vs89Tz11GfT6px0UNHF-7f0RGUZ3Yw6nvvGHZULPTLu9q7rex3vhntH5XF4wx0vQzm87nfDjvem-17K9_Vm4Pme53u--64qU6nHm6suVPHYT6JOHHZ8f6vjRwHG5X93TOXAUAdieE4uQ4nmxd_kJ1B8jnzw9dup2be6eOudQZVRq0sMxelH-X6uRzkGF6UsHcj8dH0a2jSEfNmCzk_XKqCHx0sVYKohravPwPLTNVWw4clztixDmoOJFzAazpFmcyg6B9cPocRTAnCB7R3kg0fbuhzR-8-7dNltSPvPP6BGDWk_u4J88PhmpsbubZ1VVuncYCxrqPEcqj9HUZ3BTlpQozNw-wBK_EK81qvIBye3aFVSKFGv5Cs5BzUOquVUDirZQlW0MBALlyZbkiVxSJNU9qTw_B6nUbeb9MIokDGPUPFDKHEEXh6gKA-wr45ghANjG-J8cIChqE9EZgJTPxKZqZi_zsE6d-uZtv0pPdG2n-YEtDxCKepjVdwzD8HtpdlEGjHTy0CZrWeUiXqmhCUo7y1e93zq9SLONmQcRRs9P_A2GPX4Ruz1eiGTVARhdCyNreppsbbd-eH3FPvpwk1SGYZCbHWDrW4ShyJOBIt5kDA_TkWUxDCqhjKt1eNMVEM-fvIrCtUQ56VrYPQMJjsDV5dAKx90VIPu1Zjk3-7RvN-ng9R0-sruVayjNISuUdg27H0HqSXT7JxcmX24e_P7lanpk5eR8p_JeoCXNYqyxl31I0E_O_xmp7BqoCZ06fJtS236P1D1dOcvcNWQq_9_sPpu11_xwIsDmOIfpFlmioZc--4QRhOwwkGmCLL04irKaph_rdlFPTWfol-2wbL2jGVl-5hlZfbFiu0S8_MVcEPk5V0YtXA9EaY-T2jUk2kURSwKAy4l83qB7HaDrQTWNHe_eu2nvwcAQAiofAgEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.360Z","timestamp":1788682696360,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSzYscxRuungy_38GDEEIQFGlBgoI7293T3bOd3IIfp-yqWYngqT66Zivb09Xpqp6ZzGk3EQ-e9uDBi9DzzG72FhSFXHXWgyAI6duA2Yv_gCCIR5nJ4IoF9b5v1Vs89Tz11GfT6px0UNHF-7f0RGUZ3Yw6nvvGHZULPTLu9q7rex3vhntH5XF4wx0vQzm87nfDjvem-17K9_Vm4Pme53u--64qU6nHm6suVPHYT6JOHHZ8f6vjRwHG5X93TOXAUAdieE4uQ4nmxd_kJ1B8jnzw9dup2be6eOudQZVRq0sMxelH-X6uRzkGF6UsHcj8dH0a2jSEfNmCzk_XKqCHx0sVYKohravPwPLTNVWw4clztixDmoOJFzAazpFmcyg6B9cPocRTAnCB7R3kg0fbuhzR-8-7dNltSPvPP6BGDWk_u4J88PhmpsbubZ1VVuncYCxrqPEcqj9HUZ3BTlpQozNw-wBK_EK81qvIBye3aFVSKFGv5Cs5BzUOquVUDirZQlW0MBALlyZbkiVxSJNU9qTw_B6nUbeb9MIokDGPUPFDKHEEXh6gKA-wr45ghANjG-J8cIChqE9EZgJTPxKZqZi_zsE6d-uZtv0pPdG2n-YEtDxCKepjVdwzD8HtpdlEGjHTy0CZrWeUiXqmhCUo7y1e93zq9SLONmQcRRs9P_A2GPX4Ruz1eiGTVARhdCyNreppsbbd-eH3FPvpwk1SGYZCbHWDrW4ShyJOBIt5kDA_TkWUxDCqhjKt1eNMVEM-fvIrCtUQ56VrYPQMJjsDV5dAKx90VIPu1Zjk3-7RvN-ng9R0-sruVayjNISuUdg27H0HqSXT7JxcmX24e_P7lanpk5eR8p_JeoCXNYqyxl31I0E_O_xmp7BqoCZ06fJtS236P1D1dOcvcNWQq_9_sPpu11_xwIsDmOIfpFlmioZc--4QRhOwwkGmCLL04irKaph_rdlFPTWfol-2wbL2jGVl-5hlZfbFiu0S8_MVcEPk5V0YtXA9EaY-T2jUk2kURSwKAy4l83qB7HaDrQTWNHe_eu2nvwcAQAiofAgEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl29487205=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 1\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b0965946f187641c48a6fe44a1da0f15\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/images/500.webp","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.156Z","timestamp":1788682694156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /images/500.webp HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/category-top-down251\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 08:18:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 205110\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7d923e8f4c524ab519f2fe980f873148\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FtB5LOwOcOMdHi6s0ariob0NY%2Br5JatZrXPsY6HqP0KPMoxAhKvNOxTvK944hOErBCBcu7f2R%2B4tK%2Bv80Ao2%2BIOsJbCTUI7HF7IKCqTVySVeVGhc67gcLCseYicOZA3sdRDjyQexuqO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a36c0ab67b980883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205110,"size_decoded":205875,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 712x400, components 3","md5":"2b2be98e7002aa15649ab5ce76631009","sha1":"0e5fe8ff88ec9e3b99ebdfdb174c04a5c02e9542","sha256":"52907c18c6fe1efbae82772b711f68c6db278d1a887611c4203058547d4299eb","sha512":"6d35f1361f0c7f38d6a9636c30b3ebd2ec0c03dbbf3531ae2ca6ec466e586cd8af5936274b072a3223eeb47b8ff6fd04f45c648422177b1289baae0395e4e270","ssdeep":"6144:CQgeANafd+Yz1jKl5aLggsEZ3Cy1d1dfrwC7CdNwrBu:vFfd+Mu5aLgKyyPjyNwM","tlshash":"4914129d6bd49e2bc8910abed10e20253d862e1cf637ee905c93fe6cc95141f178f19a","first_seen":"2026-09-06T08:18:49.331093Z","last_seen":"2026-09-06T08:18:49.331093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSumZ148SCEIJ5kFBEVZ7Z_Tk-bW_DHxeyqiSQgIlVdVbOV6enudFXPTOaia_xx3YOIF6Hnm9ndHCQoHrzqrCAiCOnbgtlL_gFBkBxlZgc3pKDee_W9oup7H98X0-KEtFHQ43cupxMVx3TTb1vNl66phKcj3dy62rSttnWxeU0lHe9ic7wM-fA12_Xa1svNt0TUTzcdy7Ys27Kbb6pcyHS8uepCZXft0G93vLZtd9u272CcP47oYgOaboAPT8h5KF499UB-ABUtkAy-f13ovkmzV98YFDE1aY4hP3w_6SfpKMHgrJR5DTI5XN9GqitCvqkjTQ7XUyAdzpdTgKmK1J--D5YcrqmCDfdP2bIYIgHjT2I0XEDECyi6QJTehuL3CBBxbG0jGRxspfmI3jrt0mW3Io1__4EaVaRx_wKSwd1LsRo3r6RxYVSaaIxlCTVeQPUWyIoFzKQONTpCZD6F4n8Sq_4sksH-ZVrkFIofv2DZ1Ar8iLVkxw9bAQ2tVsiiqOV5nNshlV3XYyuNlFyA6hqK5VY1FLKOIqtjwI-bNOxKFnY8GgoZSG7ZQUR91w0Dz3dkJ_JRRLtQfA9R_vlBxndMfzg3eSHmRRLpqXPnFPLCFXiwBL1w6nxXfJTFTuh1A8fypzayfPcOdwPhssibUvTVHjQ_B20qUnv3Ywx5uc9j7ejygMe6YPY6O-vslrPU9KZ0PzU9kRDQfA85L-cqu6lvIzIbs4nUfJYuA2WmnFHGy5nihiC_-ahQlHdbAWWs1ZUBb0kRSNfjrCukM5faFOU0W_ur9svfAn1x3AyFXOrZdZ2uG3Y83gk560ROyOyO4H7YgVYllK6vBJ6oilz_6S9kqiK1Z14Eo0fQ8REitQFa2KCjEnSnxCT5cYcmvR4dCN3uKbNTsLZKwdMSmWnA3KpBGDKNT8iF2XtXL_28cs_b6kuI6A-yXojyElle4ob6laAX7_6wnRk1UBO6tNMVQ414AlTd236ISFXk3MPnV75-5esPEWWfQGf_vzSLdVYRef46dErAshpiRRCLs68oK6EfObOzeqo_Qy9vgMWNGYvzxpzFefzVim1FxMl-RcSD4bL6DVodN7uOY1mR7YQ89L3Q7Urhe3YQCN92O8JyfRhd3fj2ud__GwDgaHRmcQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.498Z","timestamp":1788682697498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSz4scRRSumZ148SCEIJ5kFBEVZ7Z_Tk-bW_DHxeyqiSQgIlVdVbOV6enudFXPTOaia_xx3YOIF6Hnm9ndHCQoHrzqrCAiCOnbgtlL_gFBkBxlZgc3pKDee_W9oup7H98X0-KEtFHQ43cupxMVx3TTb1vNl66phKcj3dy62rSttnWxeU0lHe9ic7wM-fA12_Xa1svNt0TUTzcdy7Ys27Kbb6pcyHS8uepCZXft0G93vLZtd9u272CcP47oYgOaboAPT8h5KF499UB-ABUtkAy-f13ovkmzV98YFDE1aY4hP3w_6SfpKMHgrJR5DTI5XN9GqitCvqkjTQ7XUyAdzpdTgKmK1J--D5YcrqmCDfdP2bIYIgHjT2I0XEDECyi6QJTehuL3CBBxbG0jGRxspfmI3jrt0mW3Io1__4EaVaRx_wKSwd1LsRo3r6RxYVSaaIxlCTVeQPUWyIoFzKQONTpCZD6F4n8Sq_4sksH-ZVrkFIofv2DZ1Ar8iLVkxw9bAQ2tVsiiqOV5nNshlV3XYyuNlFyA6hqK5VY1FLKOIqtjwI-bNOxKFnY8GgoZSG7ZQUR91w0Dz3dkJ_JRRLtQfA9R_vlBxndMfzg3eSHmRRLpqXPnFPLCFXiwBL1w6nxXfJTFTuh1A8fypzayfPcOdwPhssibUvTVHjQ_B20qUnv3Ywx5uc9j7ejygMe6YPY6O-vslrPU9KZ0PzU9kRDQfA85L-cqu6lvIzIbs4nUfJYuA2WmnFHGy5nihiC_-ahQlHdbAWWs1ZUBb0kRSNfjrCukM5faFOU0W_ur9svfAn1x3AyFXOrZdZ2uG3Y83gk560ROyOyO4H7YgVYllK6vBJ6oilz_6S9kqiK1Z14Eo0fQ8REitQFa2KCjEnSnxCT5cYcmvR4dCN3uKbNTsLZKwdMSmWnA3KpBGDKNT8iF2XtXL_28cs_b6kuI6A-yXojyElle4ob6laAX7_6wnRk1UBO6tNMVQ414AlTd236ISFXk3MPnV75-5esPEWWfQGf_vzSLdVYRef46dErAshpiRRCLs68oK6EfObOzeqo_Qy9vgMWNGYvzxpzFefzVim1FxMl-RcSD4bL6DVodN7uOY1mR7YQ89L3Q7Urhe3YQCN92O8JyfRhd3fj2ud__GwDgaHRmcQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 8\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cdcc1b927c992d8ef89d0c794471d2a9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/pixel/ase","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:30.752Z","timestamp":1788682710752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1935\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:30 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Device-Stock-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3294,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":28,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSz4sjRRSuZKMXD4IsiyeJIKJiMt2d_pF2b4s_Lrszsrsyggetn5madLp7u7qTbE6Oq55nQcGL0PmSmdmDLIqHvWrGgyAI27cBdy77DwiCePAgyQRHt6Dee_W9oup7H9_n0-KUtFHQk3evJRMdRXTDa1vNV7Z1LJKRaW7ebNpW27rc3Nax715ujpchG75hd9y29WrzHcn7yYZj2ZZlW3bzbZ1JlYw3Vl3o9L4dem3fbdt2t217DsbZk4gp6jC0DjE8Jc9Bi-rZx-oDaL5APPj2TWn6eZK-_tagiGieZBiKo_fifpyMYgzOS5XVoOKj9W0kpiLkqzqS-Gg9BZLhfDkFmK5I_dIjsPhoTRVseHDGlkWQMZh4BqPhAjJaQNMFeHIHWjwkABfY3EI8ONxMshG9fdaly25FGn_-AT2qSOPRRcSD-1ciPW7eSKIi10lsMFYl9HgB3VsgLRbIJ3Xo0TF4_gm0-JVY9RcQDw6u0SKj0OLkJcumVuBx1lK-F7YCGlqtkHHecl0h7JCqbsdlK420WoCaGorl1jUUqo4irWMgTpo07CoW-i4NpQqUsOyAU6_TCQPXc5TPPRR8D1rsg2efHaZiJ-8P53lWyHkRczO1751BbrgCD5egG07tb4oP08gJ3W7gWN7URprt3ROdQHYYd6cUfb0PI2owOcFQlAciMo4pD0VkCmavs7POnXKW5L0pPUjynowJaLaPTJRznd4yd8DzC7OJMmKWLANleTmjTJQzLXKC7Nb_RKJOK_Atp9WVrmq5SoWBE9iBEGKuTF6U03TtrdqPv0v05UkzlGqpZbfjdDuh7wo_FMznTshsXwov9GF0CW3qK3EnuiLvP_gNqa5I7fmXwegxTHQMri-AFjboqATdKTGJv9-hca9HB9K0ezrfKVhbJxBJiTRvIL9dg8zJNDolF2fXb175YeWcqx_dheS_kPUCz0qkWYld_RNBL9r7bivN9UBP6NJKN3Kay6dB9cOtv8B1RZ76-8uVp1-7uw2efgyT_vvSLDJpReTj6zAJAUvriDRBJM-_oqyE-c-ZnddT8yl6WQMsasxYlDXmLMqiLyoiH1xaUa7I1d2dZUhh9EnTEq60eUi9QEnP85jnOlwpZgWO6nScbojcVLtfv_jzPwMAzds62m0EAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.436Z","timestamp":1788682696436,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSz4sjRRSuZKMXD4IsiyeJIKJiMt2d_pF2b4s_Lrszsrsyggetn5madLp7u7qTbE6Oq55nQcGL0PmSmdmDLIqHvWrGgyAI27cBdy77DwiCePAgyQRHt6Dee_W9oup7H9_n0-KUtFHQk3evJRMdRXTDa1vNV7Z1LJKRaW7ebNpW27rc3Nax715ujpchG75hd9y29WrzHcn7yYZj2ZZlW3bzbZ1JlYw3Vl3o9L4dem3fbdt2t217DsbZk4gp6jC0DjE8Jc9Bi-rZx-oDaL5APPj2TWn6eZK-_tagiGieZBiKo_fifpyMYgzOS5XVoOKj9W0kpiLkqzqS-Gg9BZLhfDkFmK5I_dIjsPhoTRVseHDGlkWQMZh4BqPhAjJaQNMFeHIHWjwkABfY3EI8ONxMshG9fdaly25FGn_-AT2qSOPRRcSD-1ciPW7eSKIi10lsMFYl9HgB3VsgLRbIJ3Xo0TF4_gm0-JVY9RcQDw6u0SKj0OLkJcumVuBx1lK-F7YCGlqtkHHecl0h7JCqbsdlK420WoCaGorl1jUUqo4irWMgTpo07CoW-i4NpQqUsOyAU6_TCQPXc5TPPRR8D1rsg2efHaZiJ-8P53lWyHkRczO1751BbrgCD5egG07tb4oP08gJ3W7gWN7URprt3ROdQHYYd6cUfb0PI2owOcFQlAciMo4pD0VkCmavs7POnXKW5L0pPUjynowJaLaPTJRznd4yd8DzC7OJMmKWLANleTmjTJQzLXKC7Nb_RKJOK_Atp9WVrmq5SoWBE9iBEGKuTF6U03TtrdqPv0v05UkzlGqpZbfjdDuh7wo_FMznTshsXwov9GF0CW3qK3EnuiLvP_gNqa5I7fmXwegxTHQMri-AFjboqATdKTGJv9-hca9HB9K0ezrfKVhbJxBJiTRvIL9dg8zJNDolF2fXb175YeWcqx_dheS_kPUCz0qkWYld_RNBL9r7bivN9UBP6NJKN3Kay6dB9cOtv8B1RZ76-8uVp1-7uw2efgyT_vvSLDJpReTj6zAJAUvriDRBJM-_oqyE-c-ZnddT8yl6WQMsasxYlDXmLMqiLyoiH1xaUa7I1d2dZUhh9EnTEq60eUi9QEnP85jnOlwpZgWO6nScbojcVLtfv_jzPwMAzds62m0EAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 87d76fba9e4262dfff65bf37819ea516\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2f7vtHtb_Lns7oi7soIHrb_O1KTT3dtVnWRzclz1PIKIF6HzJTOzB1kUD3vVjAdBELZvA-4oePQiCOJRkgmO2tDvvfpe8ep7H99Hs_KEdFHS49evZlOVJPSi37Xaz91UqcjGun3tRtu2utal9k2VBt6l9mQVitFLtut1refbr0k-yC46lm1ZtmW3X1WFjLPJxXUXKr9nR3438Lq23evavoNJ8X9El01o2oQYnZAnoET9-K_x21B8iXT45ctSD0yWv_jKsEyoyQqMxOGb6SDNximGZ2VcNBCnh5vbyHRNyGdNZOnhZgtko8VqCzBVk-aFh2Dp4YYq2Gj_lC1LIFMw8SjGoyVksoSiS_DsDpR4QAAucG0L6fDgWlaM6e3TLl11a9L68w-ocU1aD88jHd67nKhJ-3qWlEZlqcYkrqAmS6j-Enm5hJk2ocZH4OZ9KPEjsZpPIR3uX6VlQaHE8TOWTa3Q56wTB37UCWlkdSLGecfzhLAjGvdcj601UvESVDdQrn7VQBk3UeZNDMVxm0a9mEWBRyMZh7Gw7JBT33Wj0POdOOA-Sr4LJfbAiw8PcrFtBqOFKUq5KFOuZ_bdU8iL1uDBCvSimf1F-U6eOJHXCx3Ln9nIi927wg2ly7g3oxioPWjRgDYEI1Hti0Q7ujoQiS6ZvcnOJrvVPDP9Gd3PTF-mBLTYQyGqhcpv6Tvg5tx8Gmsxz1aBMlPNKRPVXAlDUNz6j0jU6YSB5XR60os7XhxHoRPaoRBiEWtTVrN8463Gt79LDORxO5LxSsue6_TcKPBEEAkWcCdidiCFHwXQqoLSzbW4U1WTt-7_hFzVpPHks2D0CDo5AlfnQEsbdFyBbleYpl9v07Tfp0Opu31ltkvWVRlEViE3LZjbDUhDZskJOT9_48blb9bOubKTQ_IfyOYDLyrkRYUd9R1BP9n9ais3aqimdGWl64Ya-QioerD1F7iqyWO__bL29Auf_gyevwed_zNpnui8Jlfe_Rg6I2B5C4kiSOTZU5RV0P86s7N6pj9Av2iBJa05S4rWgiVF8klN5P0L65kr3tun5LU6bvccx7K47UQi8r3I7cXS9-wwlL7tBtJyfRhd73z-9Pd_DwDHD4AIbQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.442Z","timestamp":1788682696442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2f7vtHtb_Lns7oi7soIHrb_O1KTT3dtVnWRzclz1PIKIF6HzJTOzB1kUD3vVjAdBELZvA-4oePQiCOJRkgmO2tDvvfpe8ep7H99Hs_KEdFHS49evZlOVJPSi37Xaz91UqcjGun3tRtu2utal9k2VBt6l9mQVitFLtut1refbr0k-yC46lm1ZtmW3X1WFjLPJxXUXKr9nR3438Lq23evavoNJ8X9El01o2oQYnZAnoET9-K_x21B8iXT45ctSD0yWv_jKsEyoyQqMxOGb6SDNximGZ2VcNBCnh5vbyHRNyGdNZOnhZgtko8VqCzBVk-aFh2Dp4YYq2Gj_lC1LIFMw8SjGoyVksoSiS_DsDpR4QAAucG0L6fDgWlaM6e3TLl11a9L68w-ocU1aD88jHd67nKhJ-3qWlEZlqcYkrqAmS6j-Enm5hJk2ocZH4OZ9KPEjsZpPIR3uX6VlQaHE8TOWTa3Q56wTB37UCWlkdSLGecfzhLAjGvdcj601UvESVDdQrn7VQBk3UeZNDMVxm0a9mEWBRyMZh7Gw7JBT33Wj0POdOOA-Sr4LJfbAiw8PcrFtBqOFKUq5KFOuZ_bdU8iL1uDBCvSimf1F-U6eOJHXCx3Ln9nIi927wg2ly7g3oxioPWjRgDYEI1Hti0Q7ujoQiS6ZvcnOJrvVPDP9Gd3PTF-mBLTYQyGqhcpv6Tvg5tx8Gmsxz1aBMlPNKRPVXAlDUNz6j0jU6YSB5XR60os7XhxHoRPaoRBiEWtTVrN8463Gt79LDORxO5LxSsue6_TcKPBEEAkWcCdidiCFHwXQqoLSzbW4U1WTt-7_hFzVpPHks2D0CDo5AlfnQEsbdFyBbleYpl9v07Tfp0Opu31ltkvWVRlEViE3LZjbDUhDZskJOT9_48blb9bOubKTQ_IfyOYDLyrkRYUd9R1BP9n9ais3aqimdGWl64Ya-QioerD1F7iqyWO__bL29Auf_gyevwed_zNpnui8Jlfe_Rg6I2B5C4kiSOTZU5RV0P86s7N6pj9Av2iBJa05S4rWgiVF8klN5P0L65kr3tun5LU6bvccx7K47UQi8r3I7cXS9-wwlL7tBtJyfRhd73z-9Pd_DwDHD4AIbQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 8\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 976675a91a3699827bb8dafe404a4b51\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fjs%2Fscript.js\u0026l=1144\u0026fd=517","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:25.292Z","timestamp":1788682705292,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.bakestubborn.com%2Fsb%2Fssp%2Finterstitial%2Fmessage_redcircle%2F1%2Fjs%2Fscript.js\u0026l=1144\u0026fd=517 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2e5Odzrt3hZ_Lrs74q6s4EHrN1OTTndvV3WSzclx1fMIIl6EzpfMzB5kUTzsVTMeBEHYvg24o-DRiyCIR0kmOGpBvffqvcer7318H82KE9JGQY9fv5pOdRzTi0HbaT53UyciHZvmtRtN12k7l5o3ddL1LzUnK5OPXnI7ftt5vvma5IP0oue4juM6bvNVnUuVTi6uq9DZPTcK2l2_7bq9tht4mOT_z5iiDkPrEKMT8gS0qB7_Vb0NzZdIhl--LM3AptmLrwyLmNo0x0gcvpkMknScYHgWqrwGlRxuupGaipDP6kiTw80WSEeL1RZguiL1Cw_BksMNVLDR_ilaFkMmYOJRjEdLyHgJTZfg6R1o8YAAXODaFpLhwbU0H9Pbp1W6qlak8ecf0OOKNB6eRzK8dznWk-b1NC6sThODiSqhJ0vo_hJZsYSd1qHHR-D2fWjxI3HqTyEZ7l-lRU6hxfEzjkudMOCspbpB1App5LQixnnL94VwI6p6HZ-tOdJqCWpqKFZX11CoOoqsjqE4btKop1jU9WkkVaiE44acBp1OFPqBp7o8QMF3ocUeeP7hoki4mbl3M7FtByM_Wti8kAerpB_N3C-Kd7LYi_xe6DnBzD047Vr3IMt374pOKDuM-zOKgd6DETUYSzAS5b6IjWfKAxGbgrkb7218p5yntj-j-6nty4SA5nvIRbnQ2S1zB9yem0-VEfN0ZSiz5ZwyUc61sAT5rf-QRL1W2HW8Vk_6quUrFYVe6IZCiIUytihn2UZbtW9_lxjI42Yk1YrLXsfrdaKuL7qRYF3uRcztShFEXRhdQpv6mtyprshb939CpitSe_JZMHoEEx-B63OghQs6LkG3S0yTr7dp0u_ToTTtvrbbBWvrFCItkdkG7O0apCWz-IScn79x4_I3a-Vc2ckg-Q9kc8DzElleYkd_R9CPd7_ayqwe6ildSem6pVY-AqofbP0Frivy2G-_rDX9wqc_g2fvwWT_TJrHJqvIlXc_hkkJWNZArAliefYVZSXMv97sLJ6ZD9DPG2BxY87ivLFgcR5_UhF5_8J65gr39il4o4-bjvClyyMahEoGQcAC3-NKMSf0VKfj9SJYU-18_vT3fw8AziHQsm0EAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.438Z","timestamp":1788682696438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2e5Odzrt3hZ_Lrs74q6s4EHrN1OTTndvV3WSzclx1fMIIl6EzpfMzB5kUTzsVTMeBEHYvg24o-DRiyCIR0kmOGpBvffqvcer7318H82KE9JGQY9fv5pOdRzTi0HbaT53UyciHZvmtRtN12k7l5o3ddL1LzUnK5OPXnI7ftt5vvma5IP0oue4juM6bvNVnUuVTi6uq9DZPTcK2l2_7bq9tht4mOT_z5iiDkPrEKMT8gS0qB7_Vb0NzZdIhl--LM3AptmLrwyLmNo0x0gcvpkMknScYHgWqrwGlRxuupGaipDP6kiTw80WSEeL1RZguiL1Cw_BksMNVLDR_ilaFkMmYOJRjEdLyHgJTZfg6R1o8YAAXODaFpLhwbU0H9Pbp1W6qlak8ecf0OOKNB6eRzK8dznWk-b1NC6sThODiSqhJ0vo_hJZsYSd1qHHR-D2fWjxI3HqTyEZ7l-lRU6hxfEzjkudMOCspbpB1App5LQixnnL94VwI6p6HZ-tOdJqCWpqKFZX11CoOoqsjqE4btKop1jU9WkkVaiE44acBp1OFPqBp7o8QMF3ocUeeP7hoki4mbl3M7FtByM_Wti8kAerpB_N3C-Kd7LYi_xe6DnBzD047Vr3IMt374pOKDuM-zOKgd6DETUYSzAS5b6IjWfKAxGbgrkb7218p5yntj-j-6nty4SA5nvIRbnQ2S1zB9yem0-VEfN0ZSiz5ZwyUc61sAT5rf-QRL1W2HW8Vk_6quUrFYVe6IZCiIUytihn2UZbtW9_lxjI42Yk1YrLXsfrdaKuL7qRYF3uRcztShFEXRhdQpv6mtyprshb939CpitSe_JZMHoEEx-B63OghQs6LkG3S0yTr7dp0u_ToTTtvrbbBWvrFCItkdkG7O0apCWz-IScn79x4_I3a-Vc2ckg-Q9kc8DzElleYkd_R9CPd7_ayqwe6ildSem6pVY-AqofbP0Frivy2G-_rDX9wqc_g2fvwWT_TJrHJqvIlXc_hkkJWNZArAliefYVZSXMv97sLJ6ZD9DPG2BxY87ivLFgcR5_UhF5_8J65gr39il4o4-bjvClyyMahEoGQcAC3-NKMSf0VKfj9SJYU-18_vT3fw8AziHQsm0EAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 2\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9486aa39f6a79dad337f0a3fc23a65e9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F8e%2Fff%2F66%2F8eff6635b7ed4954a8b4e92629e58a35%2F1698745384.html\u0026l=1495\u0026fd=3674","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.620Z","timestamp":1788682704620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F8e%2Fff%2F66%2F8eff6635b7ed4954a8b4e92629e58a35%2F1698745384.html\u0026l=1495\u0026fd=3674 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl29487207=1; pdhtkv29=true; uncs29=1; u_pl31019776=1; slec8888a19c6a1141f12aba002c4984b9b9=[6790255]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"levitydinerdowny.com/59/3a/e0/593ae0a2fb3fa3045dd2b8ce649908ab.js","fqdn":"levitydinerdowny.com","domain":"levitydinerdowny.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.429Z","timestamp":1788682709429,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"levitydinerdowny.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 00:38:22 GMT","end":"Fri, 06 Nov 2026 00:38:21 GMT"},"fingerprint":{"sha1":"8F:C8:EC:66:A9:2C:C4:C9:BC:54:1A:99:9D:0E:65:9D:CB:CE:5A:E9","sha256":"E1:54:D3:ED:AE:BB:39:C4:9D:8C:81:DD:F8:62:A6:1D:A4:48:E2:3C:A4:D2:ED:09:DB:A4:3A:7B:9C:5F:9C:3D"}}},"request":{"raw":"GET /59/3a/e0/593ae0a2fb3fa3045dd2b8ce649908ab.js HTTP/1.1\r\nHost: levitydinerdowny.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pip_8f26c41cec9b382d7b940db003223fde=1; pip_5968a976363b7c9ef2324b6a7fba9a55=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 3\r\nHost: levitydinerdowny.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b9e54fd6a6991f99a1ea4aa72d0b108e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73046,"size_decoded":28894,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"98d2bb9579e80d8c032027a906d1637c","sha1":"1b7aeb055a6b685a0906b497fd33ec9348e56466","sha256":"2d109b8f04a3dcf08efa0871e43842447a978871b1afcf5d450b5332436de697","sha512":"6fceb97281cfd44f451a5750ef7212639d60e1977de9c92d0f5b4abf3695951cb45aa581fc90d0753dbc32e965822abcdf4d218865df1462cbca82ac552e3a78","ssdeep":"1536:0AcTGrdD6D9d9SUaXt0KiKBcMrDOSOBS1cwnJHPPwIElX:pZDK9jBuHtOBZwnJH1E","tlshash":"3663e8dc7f18a1a216b1a8b3221e9275e069cd45b5dce8ccf07d381c2d67366b87da34","first_seen":"2026-09-06T08:18:49.332296Z","last_seen":"2026-09-06T08:18:49.332296Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"levitydinerdowny.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSzYsc1Rd93dO_nwsXgoTgSloQUbA79V1dyS74sTEzaiIRXMj77Hnp6qpKvaruTm90Ej-2s3DhRqg-3TOThQTFhVvtEUQEIbUbMLPJPyAI4lK6p3GCBXXvfec-7jv3cD6blaeki5KevH0tneo4ppf8rtV--aZORDo27e0bbdvqWlfaN3USeFfak1XIR5dt1-tar7TflHyQXnIs27Jsy26_oXOp0smldRc6e2BHfjfwurbd69q-g0n-X8SUWzB0C2J0Sp6FFvUzj9UH0HyJZPjNa9IMijR79fVhGdMizTESR-8lgyQdJxielypvQCVHm9tITU3Il02kydFmC6SjxWoLMF2T5sVHYMnRhirY6OCMLYshEzDxNMajJWS8hKZL8PQetHhIAC6wvYNkeLid5mN656xLV92atP76E3pck9ajC0iGD67GetK-nsZlodPEYKIq6MkSur9EVi5RTJvQ42Pw4i60-I1YzeeRDA-u0TKn0OLkRcumVuhz1lGBH3VCGlmdiHHe8Twh7IiqnuuxtUZaLUFNA-Xq1w2Uqokya2IoTto06ikWBR6NpAqVsOyQU991o9DzHRVwHyXfgxb74Pmnh5nYLQajRZGXclEm3Myc-2eQF63BwxXoRTPn6_LDLHYirxc6lj-zkeV794UbSpdxb0Yx0Psw4n8wRU0a73yEkagORGwcUx2K2JTM3mRnk91qnhb9GT1Ii75MCGi-j1xUC53dNvfAi635VBkxT1eBsqKaUyaquRYFQX77SaGo6HVCylinp0LRUTJUridYTypnoUxRVrNs46_Gj39IDORJO5JqpWfPdXpuFHgiiAQLuBMxO5DCjwIYXUGb5lrgqa7J-9__jkzXpPHcS2D0GCY-BtdboKUNOq5AdytMk-92adLv06E03b4udkvW1SlEWiErWijuNCALMotPyYX5uzeu_rB2j3w8guS_ks0HnlfI8gq39E8E_Xjv252s0EM9pSs7XS9oIf8Pqh_u_A2ua3LxqbtrX18OWuDZxzDZv5Pmsclq8pb-HCYlYNkWYk0Qy_OnKKtgnjiz83pmPkE_b4HFrTmL89aCxXn8xXpcTeTpwZr3qvoZRp-0LeFJm0fUD5X0fZ_5nsOVYlboKNd1ehEKU9_66oVf_hkAe5x3onEEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.495Z","timestamp":1788682697495,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSzYsc1Rd93dO_nwsXgoTgSloQUbA79V1dyS74sTEzaiIRXMj77Hnp6qpKvaruTm90Ej-2s3DhRqg-3TOThQTFhVvtEUQEIbUbMLPJPyAI4lK6p3GCBXXvfec-7jv3cD6blaeki5KevH0tneo4ppf8rtV--aZORDo27e0bbdvqWlfaN3USeFfak1XIR5dt1-tar7TflHyQXnIs27Jsy26_oXOp0smldRc6e2BHfjfwurbd69q-g0n-X8SUWzB0C2J0Sp6FFvUzj9UH0HyJZPjNa9IMijR79fVhGdMizTESR-8lgyQdJxielypvQCVHm9tITU3Il02kydFmC6SjxWoLMF2T5sVHYMnRhirY6OCMLYshEzDxNMajJWS8hKZL8PQetHhIAC6wvYNkeLid5mN656xLV92atP76E3pck9ajC0iGD67GetK-nsZlodPEYKIq6MkSur9EVi5RTJvQ42Pw4i60-I1YzeeRDA-u0TKn0OLkRcumVuhz1lGBH3VCGlmdiHHe8Twh7IiqnuuxtUZaLUFNA-Xq1w2Uqokya2IoTto06ikWBR6NpAqVsOyQU991o9DzHRVwHyXfgxb74Pmnh5nYLQajRZGXclEm3Myc-2eQF63BwxXoRTPn6_LDLHYirxc6lj-zkeV794UbSpdxb0Yx0Psw4n8wRU0a73yEkagORGwcUx2K2JTM3mRnk91qnhb9GT1Ii75MCGi-j1xUC53dNvfAi635VBkxT1eBsqKaUyaquRYFQX77SaGo6HVCylinp0LRUTJUridYTypnoUxRVrNs46_Gj39IDORJO5JqpWfPdXpuFHgiiAQLuBMxO5DCjwIYXUGb5lrgqa7J-9__jkzXpPHcS2D0GCY-BtdboKUNOq5AdytMk-92adLv06E03b4udkvW1SlEWiErWijuNCALMotPyYX5uzeu_rB2j3w8guS_ks0HnlfI8gq39E8E_Xjv252s0EM9pSs7XS9oIf8Pqh_u_A2ua3LxqbtrX18OWuDZxzDZv5Pmsclq8pb-HCYlYNkWYk0Qy_OnKKtgnjiz83pmPkE_b4HFrTmL89aCxXn8xXpcTeTpwZr3qvoZRp-0LeFJm0fUD5X0fZ_5nsOVYlboKNd1ehEKU9_66oVf_hkAe5x3onEEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 75f75ceb242b8194095191334aebe068\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSS4scVRS-3dO6cSFKCK6kBBEFu1PPrq5kI8HHxmTURCK4kPvsuenqqkrdqu5Ob3SMj-0sRNwI1V_3zGQhQXHhVnsEEUFI7QbMbPIHBEFcSvc0TvDCPefccw7nfufj-2xWnpAOSnr81pV0quOYXgg6tvXiDZ2IdGysq9ctx-7Yl6wbOun6l6zJyuSji47nd-yXrDckH6QXXNuxbcd2rNd1LlU6ubCuQmf3nCjodP2O4_Q6TuBikv8_Y8otGLoFMTohT0OL-smH6n1ovkQy_PZVaQZFmr382rCMaZHmGInDd5NBko4TDM9ClTegksNNN1JTE_JVE2lyuNkC6Wix2gJM16R5_gFYcriBCjbaP0XLYsgETDyB8WgJGS-h6RI8vQMt7hOAC1zdRjI8uJrmY3r7tEpX1Zq0_v4LelyT1oNzSIb3Lsd6Yl1L47LQaWIwURX0ZAndXyIrlyimTejxEXjxMbT4ndjNZ5EM96_QMqfQ4vh526F2GHDWVt0gaoc0stsR47zt-0I4EVU9z2drjrRagpoGytXVDZSqiTJrYiiOLRr1FIu6Po2kCpWwnZDTwPOi0A9c1eUBSr4LLfbA808XZcLNzL2biZ1iMPKjRZGX8mCV9KOZ-035QRa7kd8LXTuYOQenXeseZPnuXeGF0mPcn1EM9B6MeAymqEnj7Q8xEtW-iI1rqgMRm5I5G-9uvFfN06I_o_tp0ZcJAc33kItqobNb5g54sTWfKiPm6cpQVlRzykQ116IgyG89ShQVvXZIGWv3VCjaSobK8wXrSeUulCnKapZt9NX46U-JgTy2IqlWfPY8t-dFXV90I8G63I2Y05UiiLowuoI2zTXBU12T9374A5muSeOZF8DoEUx8BK63QEsHdFyB7lSYJt_v0KTfp0NpOn1d7JSso1OItEJWtFDcbkAWZBafkHPzd65f_nGtHnnyCyT_jWwOeF4hyyvc1D8T9OPd77azQg_1lK7kdK2ghXwcVN_f_gdc1-T8U1-udX3RfQU8-wgm-2_SPDbZavw-TErAshZiTRDLs68oq2AeebOzeGY-QT9vgcWtOYvz1oLFefxFTd7Un69n1kQ-HJ2CN_rYsoUvHR7RIFQyCAIW-C5XitmhqzzP7UUoTH3z6-d-_XcALEx7xnEEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.496Z","timestamp":1788682697496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSS4scVRS-3dO6cSFKCK6kBBEFu1PPrq5kI8HHxmTURCK4kPvsuenqqkrdqu5Ob3SMj-0sRNwI1V_3zGQhQXHhVnsEEUFI7QbMbPIHBEFcSvc0TvDCPefccw7nfufj-2xWnpAOSnr81pV0quOYXgg6tvXiDZ2IdGysq9ctx-7Yl6wbOun6l6zJyuSji47nd-yXrDckH6QXXNuxbcd2rNd1LlU6ubCuQmf3nCjodP2O4_Q6TuBikv8_Y8otGLoFMTohT0OL-smH6n1ovkQy_PZVaQZFmr382rCMaZHmGInDd5NBko4TDM9ClTegksNNN1JTE_JVE2lyuNkC6Wix2gJM16R5_gFYcriBCjbaP0XLYsgETDyB8WgJGS-h6RI8vQMt7hOAC1zdRjI8uJrmY3r7tEpX1Zq0_v4LelyT1oNzSIb3Lsd6Yl1L47LQaWIwURX0ZAndXyIrlyimTejxEXjxMbT4ndjNZ5EM96_QMqfQ4vh526F2GHDWVt0gaoc0stsR47zt-0I4EVU9z2drjrRagpoGytXVDZSqiTJrYiiOLRr1FIu6Po2kCpWwnZDTwPOi0A9c1eUBSr4LLfbA808XZcLNzL2biZ1iMPKjRZGX8mCV9KOZ-035QRa7kd8LXTuYOQenXeseZPnuXeGF0mPcn1EM9B6MeAymqEnj7Q8xEtW-iI1rqgMRm5I5G-9uvFfN06I_o_tp0ZcJAc33kItqobNb5g54sTWfKiPm6cpQVlRzykQ116IgyG89ShQVvXZIGWv3VCjaSobK8wXrSeUulCnKapZt9NX46U-JgTy2IqlWfPY8t-dFXV90I8G63I2Y05UiiLowuoI2zTXBU12T9374A5muSeOZF8DoEUx8BK63QEsHdFyB7lSYJt_v0KTfp0NpOn1d7JSso1OItEJWtFDcbkAWZBafkHPzd65f_nGtHnnyCyT_jWwOeF4hyyvc1D8T9OPd77azQg_1lK7kdK2ghXwcVN_f_gdc1-T8U1-udX3RfQU8-wgm-2_SPDbZavw-TErAshZiTRDLs68oq2AeebOzeGY-QT9vgcWtOYvz1oLFefxFTd7Un69n1kQ-HJ2CN_rYsoUvHR7RIFQyCAIW-C5XitmhqzzP7UUoTH3z6-d-_XcALEx7xnEEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=3; pdhtkv49=true; uncs49=3; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 025ff6c7eff626ff37914aa2ea1eb8c8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/impr.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2f7vtHtb_Lns7oi7soIHrb_O1KTT3dtVnWRzclz1PIKIF6HzJTOzB1kUD3vVjAdBELZPDriD4NGLIIhHSSY4akO_9-p7xavvfXwfzcoT0kVJj1-_mk1VktCLftdqP3dTpSIb6_a1G23b6lqX2jdVGniX2pNVKEYv2a7XtZ5vvyb5ILvoWLZl2ZbdflUVMs4mF9ddqPyeHfndwOvadq9r-w4mxf8RXTahaRNidEKegBL147_Gb0PxJdLhly9LPTBZ_uIrwzKhJiswEodvpoM0G6cYnpVx0UCcHm5uI9M1IZ81kaWHmy2QjRarLcBUTZoXHoKlhxuqYKP9U7YsgUzBxKMYj5aQyRKKLsGzO1DiAQG4wLUtpMODa1kxprdPu3TVrUnrzz-gxjVpPTyPdHjvcqIm7etZUhqVpRqTuIKaLKH6S-TlEmbahBofgZv3ocSPxGo-hXS4f5WWBYUSx89YNrVCn7NOHPhRJ6SR1YkY5x3PE8KOaNxzPbbWSMVLUN1AufpVA2XcRJk3MRTHbRr1YhYFHo1kHMbCskNOfdeNQs934oD7KPkulNgDLz48yMW2GYwWpijloky5ntl3TyEvWoMHK9CLZvYX5Tt54kReL3Qsf2YjL3bvCjeULuPejGKg9qBFA9oQjES1LxLt6OpAJLpk9iY7m-xW88z0Z3Q_M32ZEtBiD4WoFiq_pe-Am3PzaazFPFsFykw1p0xUcyUMQXHrPyJRpxMGltPpSS_ueHEchU5oh0KIRaxNWc3yjbca3_4uMZDH7UjGKy17rtNzo8ATQSRYwJ2I2YEUfhRAqwpKN9fiTlVN3rr_M3JVk8aTz4LRI-jkCFydAy1t0HEFul1hmn69TdN-nw6l7vaV2S5ZV2UQWYXctGBuNyANmSUn5Pz8jRuXv1k758rONiT_gWw-8KJCXlTYUd8R9JPdr7Zyo4ZqSldWum6okY-Aqgdbf4Grmjz22y9rT7_w6U_g-XvQ-T-T5onOV-Nz6IyA5eeQKIJEnj1FWQX9rzM7q2f6A_SLFljSmrOkaC1YUiSf1ETev1CTK-9-vOa9ma6O2z3HsSxuO5GIfC9ye7H0PTsMpW-7gbRcH0bXO58__f3fAwBTCe9ubQQAAA==","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.441Z","timestamp":1788682696441,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSTYgjRRSuZIMXQUGWxZNEEFEx2f7vtHtb_Lns7oi7soIHrb_O1KTT3dtVnWRzclz1PIKIF6HzJTOzB1kUD3vVjAdBELZPDriD4NGLIIhHSSY4akO_9-p7xavvfXwfzcoT0kVJj1-_mk1VktCLftdqP3dTpSIb6_a1G23b6lqX2jdVGniX2pNVKEYv2a7XtZ5vvyb5ILvoWLZl2ZbdflUVMs4mF9ddqPyeHfndwOvadq9r-w4mxf8RXTahaRNidEKegBL147_Gb0PxJdLhly9LPTBZ_uIrwzKhJiswEodvpoM0G6cYnpVx0UCcHm5uI9M1IZ81kaWHmy2QjRarLcBUTZoXHoKlhxuqYKP9U7YsgUzBxKMYj5aQyRKKLsGzO1DiAQG4wLUtpMODa1kxprdPu3TVrUnrzz-gxjVpPTyPdHjvcqIm7etZUhqVpRqTuIKaLKH6S-TlEmbahBofgZv3ocSPxGo-hXS4f5WWBYUSx89YNrVCn7NOHPhRJ6SR1YkY5x3PE8KOaNxzPbbWSMVLUN1AufpVA2XcRJk3MRTHbRr1YhYFHo1kHMbCskNOfdeNQs934oD7KPkulNgDLz48yMW2GYwWpijloky5ntl3TyEvWoMHK9CLZvYX5Tt54kReL3Qsf2YjL3bvCjeULuPejGKg9qBFA9oQjES1LxLt6OpAJLpk9iY7m-xW88z0Z3Q_M32ZEtBiD4WoFiq_pe-Am3PzaazFPFsFykw1p0xUcyUMQXHrPyJRpxMGltPpSS_ueHEchU5oh0KIRaxNWc3yjbca3_4uMZDH7UjGKy17rtNzo8ATQSRYwJ2I2YEUfhRAqwpKN9fiTlVN3rr_M3JVk8aTz4LRI-jkCFydAy1t0HEFul1hmn69TdN-nw6l7vaV2S5ZV2UQWYXctGBuNyANmSUn5Pz8jRuXv1k758rONiT_gWw-8KJCXlTYUd8R9JPdr7Zyo4ZqSldWum6okY-Aqgdbf4Grmjz22y9rT7_w6U_g-XvQ-T-T5onOV-Nz6IyA5eeQKIJEnj1FWQX9rzM7q2f6A_SLFljSmrOkaC1YUiSf1ETev1CTK-9-vOa9ma6O2z3HsSxuO5GIfC9ye7H0PTsMpW-7gbRcH0bXO58__f3fAwBTCe9ubQQAAA== HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5386607b3a7729a8f167d9ada72c0227\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/a7/f3/9a/a7f39a2b1fed45c88b99335acedd8f75/1780322336.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.489Z","timestamp":1788682697489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/a7/f3/9a/a7f39a2b1fed45c88b99335acedd8f75/1780322336.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 121766\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 01 Jun 2026 13:58:56 GMT\r\netag: \"6a1d9020-1dba6\"\r\nexpires: Tue, 08 Sep 2026 08:18:17 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121766,"size_decoded":122115,"mime_type":"image/png","magic":"PNG image data, 320 x 240, 8-bit/color RGB, non-interlaced","md5":"95247992e5d9aef3d28d097dda53e680","sha1":"ff71864dd50deda6cdf6c55408c67e3189682072","sha256":"17c1d90759184bb474364b97fae25e30b9a5b99fc413eca5709e2e3c908e80f6","sha512":"fd0c11628805880294fde6ded8ef182d2eaf5ee14a72098acfdd07617417e078d8088cfba1d2e24d2f95a517af4c57454e28bb3e7b6eacd0f431f581f82a64f2","ssdeep":"1536:2Jkeho2zUC7dCZZkwp3j6iISKLf5fr7PL3kBDEBgXx/JNM7EljNKXyJtuI8q1TBs:iZzh7duue3L5KLfJSx/Jm+8Uk4/Uqa","tlshash":"b7c3120417b332b18b9ed92984633b175676c72cfe6d53cb374e39e98274198cce2589","first_seen":"2026-06-01T20:13:30.303535Z","last_seen":"2026-09-21T11:14:22.218261Z","times_seen":107,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.1432850189708.js?dev=e\u0026fstu=01a075cb-fc59-7759-9cbc-36f448a75f47\u0026key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026ps1=1788682697\u0026rb=e\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026res=14.1055\u0026rmtc=t\u0026sht=WxD3tT-CaV5okCDtXpfbnwyNRyOXYm9IFlNHe2V1J-w\u0026shv=2\u0026st1=ebae1a9263777a4d9d0cd6a995db8723\u0026tz=0\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.871Z","timestamp":1788682697871,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Aug 2026 04:27:12 GMT","end":"Tue, 24 Nov 2026 04:27:11 GMT"},"fingerprint":{"sha1":"EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2","sha256":"D3:ED:AA:AB:A7:0F:5D:B5:E3:C6:C8:42:92:C6:71:07:01:45:1D:84:99:AD:9D:45:AD:FB:7A:B9:4D:A7:8F:57"}}},"request":{"raw":"GET /watch.1432850189708.js?dev=e\u0026fstu=01a075cb-fc59-7759-9cbc-36f448a75f47\u0026key=2a362e5cae20c33eeea29a03144bdf06\u0026kw=%5B%22top-down251%22%2C%22games%22%2C%22play%22%2C%22free%22%2C%22online%22%2C%22learnquester%22%5D\u0026ps1=1788682697\u0026rb=e\u0026refer=https%3A%2F%2Flearnquester.pages.dev%2Fcategory-top-down251\u0026res=14.1055\u0026rmtc=t\u0026sht=WxD3tT-CaV5okCDtXpfbnwyNRyOXYm9IFlNHe2V1J-w\u0026shv=2\u0026st1=ebae1a9263777a4d9d0cd6a995db8723\u0026tz=0\u0026uuid=01a075cb-f659-769f-a3d2-d85d0b523e60%3A2%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://learnquester.pages.dev\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.EuiCfxr7o1sI0vyokMb0C7C9gJNFd92l9ur9nAus6CM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:17 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\npdhtkv23=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\nuncs23=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\nu_pl29487207=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 14\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 216dfdc621bb1c10659279c3c5fe414f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-769f-a3d2-d85d0b523e60:2:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:17Z","raw_expires":"Sun, 13 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"pdhtkv23","value":"true","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv23=true; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"uncs23","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs23=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"u_pl29487207","value":"1","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl29487207=1; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4085,"size_decoded":4081,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3209)","md5":"154d02d4132634e4d98f7fe2f44f1f2b","sha1":"a66b4f0511f9eaf8d908cfbea1dc55299a79b7ab","sha256":"8ed98eb81f394d108a46ea46a90d5382acd68ba397e496f55c4bf8b54236f1c0","sha512":"1d469863ee80416ea0b0d24d92a3b19539916ef1701864db7fcb42d0a6190330c2d1d5b61ac50ca9b3b467d030e12a5b35efa97f3d0d2156b878247c4f67bf9e","ssdeep":"","tlshash":"10814c651db0d17e6167716e35ab26183d31410b2900d986ff2ce7231f406b40ea9ccc","first_seen":"2026-09-06T08:18:49.333803Z","last_seen":"2026-09-06T08:18:49.333803Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/pixel/ase","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:18.482Z","timestamp":1788682698482,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1935\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1935,"data":"[{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.render.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\"},{\"placement_key\":\"9ef44dd83283964d69db6c29b16ed596\",\"template_body\":\"body_native_pl_general\",\"event_name\":\"base.ad_request.success\",\"id_frontend_invoke\":\"01a075cb-f5d1-7acd-8677-9817929dd8ef\",\"script_version\":\"\",\"extra_json\":{\"banners_count\":4}}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":3294,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.bakestubborn.com/sb/ssp/interstitial/message_redcircle/1/img/close.svg","fqdn":"cdn.bakestubborn.com","domain":"bakestubborn.com","tld":"com"},"ip":{"addr":"104.21.74.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:24.721Z","timestamp":1788682704721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bakestubborn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 10:45:38 GMT","end":"Sun, 29 Nov 2026 11:44:06 GMT"},"fingerprint":{"sha1":"CC:2C:E2:22:5E:AA:1C:23:69:1C:A8:45:D8:E3:11:DD:72:0F:3A:7F","sha256":"BF:DE:33:C4:70:F3:0B:0C:27:4F:85:FB:EB:B1:8B:DF:D8:F6:7A:95:F2:7D:D9:E6:40:CC:60:74:A0:77:92:D1"}}},"request":{"raw":"GET /sb/ssp/interstitial/message_redcircle/1/img/close.svg HTTP/1.1\r\nHost: cdn.bakestubborn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 08:18:24 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=5,i\r\netag: \"65aa8501-4ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 486399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33nm3wZUw28nuDpg2VNlVRKfLn0qalIfrhIOC6Ig6Wu8my4TF9u29999Xs5xsiKkkJPH3h3owVGG3hLjL%2F%2B5194srPfE0dUm3RRUhIm3L6KF80acBqBdxBANNcUOpMS84I%2FWOW%2Fk2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36c0af88e3b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":2115,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-09-22T18:31:49.681506Z","times_seen":11302,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"cdn.bakestubborn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"learnquester.pages.dev/favicon.svg","fqdn":"learnquester.pages.dev","domain":"learnquester.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.361Z","timestamp":1788682694361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"learnquester.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 07:04:57 GMT","end":"Thu, 03 Dec 2026 08:03:32 GMT"},"fingerprint":{"sha1":"36:F6:3B:4A:F8:AF:05:E5:7C:F8:C4:3C:E3:0D:57:62:34:7E:CE:FB","sha256":"84:BB:96:87:52:15:B7:56:FE:69:94:CA:59:93:12:AB:78:66:AD:0E:6E:E4:45:16:C8:17:3D:96:13:E1:B4:80"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: learnquester.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/category-top-down251\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 08:18:14 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLuF%2B5UHbbZxEU4QU5uauA75jj2bIt0H8VzNt3RG4FznOP51ME46VBjkBktco7MsrX8Og%2FtDSS7y7JukTdE0rcGh4n82KBGBK%2BIDoqq%2BfVVPM3R1ri5ReOVfgqSmSuhu%2F0NPZKpXO93H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0c9dfa8b21172718a428762a20458648\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a36c0ab7cf8e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":559,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d73701e334240ee8978b4f424dc3ff4","sha1":"f108712237e4f084b46e5d65eb2b22b8b080c236","sha256":"fdc8a88d4a6ced6c53b628f8cd74328508b17c6827f944e38660ccc88cded6a0","sha512":"6bd0bbb4b33b8d38f4786f9a15bcc5a287678765b0b33f8cade92d88619d2911ccdac2ee35a4fdce7a76bc2c2203f3a9e1fd7e9e34f0b7556ebb3e0a73105d48","ssdeep":"","tlshash":"78f0c01ad1d9ca3ad20c870ad7149479232e80c35fcac120f49c2f1e5b458e34c673ec","first_seen":"2026-09-06T08:18:49.3354Z","last_seen":"2026-09-06T08:18:49.3354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.158.24.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.268Z","timestamp":1788682696268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\nset-cookie: uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Wed, 03 Sep 2036 08:18:16 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-769f-a3d2-d85d0b523e60:2:1","quoted":false,"path":"/","expires":"2036-09-03T08:18:16Z","raw_expires":"Wed, 03 Sep 2036 08:18:16 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-769f-a3d2-d85d0b523e60:2:1; Path=/; Expires=Wed, 03 Sep 2036 08:18:16 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":525,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6a8316d886b68b29e884f39e05e45647","sha1":"7e9cee6683fbcaca9c1c0ac28f5029b187502d4b","sha256":"774975d7081b204cda538de350c8add1cb7e737123ae01bf89ddb8e06303057e","sha512":"195823f9e8383f83d0518db72a71bdd108897c2b7333b57bca0878071deff26fd7ad372b9d541345a95d19c2830b2585b9b74ba5a4b88e986c53a22ff55e59bb","ssdeep":"","tlshash":"9590040104c4c1315d40d3700543df751d11c031301d50470d5df010445035d4740c55","first_seen":"2026-09-06T08:18:49.336341Z","last_seen":"2026-09-06T08:18:49.336341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/f1/73/e5/f173e5b31aca4549d4aaa5a0f1ee70bf/1675417618.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:16.389Z","timestamp":1788682696389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/f1/73/e5/f173e5b31aca4549d4aaa5a0f1ee70bf/1675417618.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 08:18:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22289\r\nserver: nginx/1.21.6\r\nlast-modified: Fri, 03 Feb 2023 09:47:06 GMT\r\netag: \"63dcd81a-5711\"\r\nexpires: Tue, 08 Sep 2026 08:18:16 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22289,"size_decoded":22637,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3","md5":"098d043c6a69bd440b0480ec326b0254","sha1":"6bfbead2bee0465f73cf4bba506f804b146d990c","sha256":"d45076e92cdc6c92980ea0c0d1637377e6a0d9f45bcb96152621cb61b895c941","sha512":"c504c699fedfbd697bbee33028e3420503ca034d00962d9b476919034abd2e8b6c7ee9afdbe9fc5bb718f9b7dbace25fd187023fedf043101d2b768c9482b8a5","ssdeep":"384:trxVof2TxAZ7enpZTVif6/rtUwtfUFo+A4h19pO2HJVdlEh+j5ujg0iN:tnoii7epxjtUwBUuJ4hTJLloa4g0iN","tlshash":"8ba2e03e27b512c2fc76542904814d7525ac8c89b862a180afefc7fd9ec0dcba77845b","first_seen":"2023-05-04T10:55:11Z","last_seen":"2026-09-21T02:49:49.098997Z","times_seen":210,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026uuid=01a075cb-f659-7a90-9bcc-44dd19af834b%3A1%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22a%22%7D\u0026rb=e","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:17.415Z","timestamp":1788682697415,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ntv.json?key=9ef44dd83283964d69db6c29b16ed596\u0026vstc=4\u0026uuid=01a075cb-f659-7a90-9bcc-44dd19af834b%3A1%3A1\u0026custom=%7B%22d37e3bc4%22%3A%22a%22%7D\u0026rb=e HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nOrigin: https://learnquester.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=2; pdhtkv49=true; uncs49=2; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:17 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://learnquester.pages.dev\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:17 GMT; Secure; SameSite=None\nuncs=3; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\nuncs49=3; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 14\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b963b262e1e1931aea3941a23c167f34\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a075cb-f659-7a90-9bcc-44dd19af834b:1:1","quoted":false,"path":"/","expires":"2026-09-13T08:18:17Z","raw_expires":"Sun, 13 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1; Path=/; Expires=Sun, 13 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"uncs","value":"3","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=3; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"},{"name":"uncs49","value":"3","quoted":false,"path":"/","expires":"2026-09-07T08:18:17Z","raw_expires":"Mon, 07 Sep 2026 08:18:17 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs49=3; Path=/; Expires=Mon, 07 Sep 2026 08:18:17 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15672,"size_decoded":12255,"mime_type":"application/json","magic":"JSON text data","md5":"d02365f1f08b34e777e27faf4ce45b39","sha1":"b1f2b2ddb6c96ec6c592cf529cec449479a4400f","sha256":"d915cb48ceb3bdc5e4ccd8c895fe1927d1b3dd74f585d6afafd3674c49ef1b6f","sha512":"cc51515158ec59983b56ec73414c6a37f5b399bbd21a8f603dc0e61e0ff15bc337842103cce7579f157357d3d4c664a2b57cdb67c9d3a8679925fa10bc9431f7","ssdeep":"384:xWQyDAQT1NUoBRyG1eG+DSfiQ8vc+YqNLQK0FqjxjL2v3bmI:xDOt1NUoBRyG1ec6Q8r3NLQKxR2Pbh","tlshash":"3062c07e8d680b5c4a4656ef009f6cd91d422c2f5c7e86d3c4cde8ad24298037a6c86e","first_seen":"2026-09-06T08:18:49.337824Z","last_seen":"2026-09-06T08:18:49.337824Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xST4hb1Re-yeT3A3EhaBUXIlFkUDCZ9z95dlesbtoZtZUKLuT-e5nbvLz3-u59SZqVY9X1LFyIILx8ycx0IUVx4dZm3AlCH7gYsLMRXAuCdCnJhI544Z5z7jmHc7_z8X0-LU5JGwU9eedqOlFxTLf8ttV89YZKRDrSze3rTdtqWxebN1QSeBeb46XJh2_Yrte2Xmu-LXk_3XIs27Jsy26-pXIZpeOtVRUqu2eHfjvw2rbdbdu-g3H-34wuGtC0ATE8JU9Dieqp36MPofgCyeDbN6XumzR7_fKgiKlJcwzF0ftJP0lHCQbnYZTXECVH626kuiLkyzrS5Gi9BdLhfLkFmKpI_bmHYMnRGirY8OAMLYshEzDxJEbDBWS8gKIL8PQOlHhAAC6wvYNkcLid5iN6-6xKl9WKNP7-C2pUkcbDC0gG9y7Faty8lsaFUWmiMY5KqPECqrdAVixgJnWo0TG4-QRK_EKs-otIBgdXaZFTKHHyimVTq-Nz1ooCP2x1aGi1QsZ5y_OEsEMadV2PrThS0QJU11Asr6qhiOoosjoG4qRJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-B6U2AfPPzssEq69cOp-U3yUxU7odTuO5U_tw0zsmv5wbvJCzpc9U_fuWcoLV0lk-d5d4Xaky7g3peirfWjxBLSpSO1djaEoD0SsHV0eilgXzF57Z-3dcpaa3pQepKYnEwKa7yMX5Vxlt_QdcLMxm0RazNKlocyUM8pEOVPCEOS3HhPFWw7l3VYnCmiLUs5aXe5I7jvSDTr2PNKmKKfZWl-1-39K9OVJM5TRks-u63TdMPBEEAoWcCdkdiCFHwbQqoTS9RXBE1WRD374DZmqSO35TTB6DB0fg6sN0MIGHZWguyUmyfe7NOn16EDqdk-Z3YK1VQqRlshMA-Z2DdKQaXxKLszeu37px5V6NpFB8p_J-oDnJbK8xE31E0Ev3vtuJzNqoCZ0Kadrhhr5f1D1YOcRuKrI_x69vNL1M5ePwbOPobPHk2axziqyef8r6JSAZRuIFUEsz7-irIT-15udx1P9KXp5AyxuzFicN-YszuMvVuMqcqX7xwp3Ra48-wK0OmlawpM2D6nfiaTv-8z3HB5FzOo4kes63RBGVze_funXfwYAuvgIN3EEAAA=","fqdn":"exemplarfederallithe.com","domain":"exemplarfederallithe.com","tld":"com"},"ip":{"addr":"172.255.141.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:29.767Z","timestamp":1788682709767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exemplarfederallithe.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 21:46:16 GMT","end":"Sun, 22 Nov 2026 21:46:15 GMT"},"fingerprint":{"sha1":"AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9","sha256":"86:4C:02:F4:E0:96:42:01:E0:03:4E:69:78:6C:47:4C:C7:B4:3D:B6:17:DA:59:20:57:EB:6C:A3:E2:8B:4A:36"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xST4hb1Re-yeT3A3EhaBUXIlFkUDCZ9z95dlesbtoZtZUKLuT-e5nbvLz3-u59SZqVY9X1LFyIILx8ycx0IUVx4dZm3AlCH7gYsLMRXAuCdCnJhI544Z5z7jmHc7_z8X0-LU5JGwU9eedqOlFxTLf8ttV89YZKRDrSze3rTdtqWxebN1QSeBeb46XJh2_Yrte2Xmu-LXk_3XIs27Jsy26-pXIZpeOtVRUqu2eHfjvw2rbdbdu-g3H-34wuGtC0ATE8JU9Dieqp36MPofgCyeDbN6XumzR7_fKgiKlJcwzF0ftJP0lHCQbnYZTXECVH626kuiLkyzrS5Gi9BdLhfLkFmKpI_bmHYMnRGirY8OAMLYshEzDxJEbDBWS8gKIL8PQOlHhAAC6wvYNkcLid5iN6-6xKl9WKNP7-C2pUkcbDC0gG9y7Faty8lsaFUWmiMY5KqPECqrdAVixgJnWo0TG4-QRK_EKs-otIBgdXaZFTKHHyimVTq-Nz1ooCP2x1aGi1QsZ5y_OEsEMadV2PrThS0QJU11Asr6qhiOoosjoG4qRJw27EwsCjoYw6kbDsDqe-64Ydz3eigPso-B6U2AfPPzssEq69cOp-U3yUxU7odTuO5U_tw0zsmv5wbvJCzpc9U_fuWcoLV0lk-d5d4Xaky7g3peirfWjxBLSpSO1djaEoD0SsHV0eilgXzF57Z-3dcpaa3pQepKYnEwKa7yMX5Vxlt_QdcLMxm0RazNKlocyUM8pEOVPCEOS3HhPFWw7l3VYnCmiLUs5aXe5I7jvSDTr2PNKmKKfZWl-1-39K9OVJM5TRks-u63TdMPBEEAoWcCdkdiCFHwbQqoTS9RXBE1WRD374DZmqSO35TTB6DB0fg6sN0MIGHZWguyUmyfe7NOn16EDqdk-Z3YK1VQqRlshMA-Z2DdKQaXxKLszeu37px5V6NpFB8p_J-oDnJbK8xE31E0Ev3vtuJzNqoCZ0Kadrhhr5f1D1YOcRuKrI_x69vNL1M5ePwbOPobPHk2axziqyef8r6JSAZRuIFUEsz7-irIT-15udx1P9KXp5AyxuzFicN-YszuMvVuMqcqX7xwp3Ra48-wK0OmlawpM2D6nfiaTv-8z3HB5FzOo4kes63RBGVze_funXfwYAuvgIN3EEAAA= HTTP/1.1\r\nHost: exemplarfederallithe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://learnquester.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: pdhtkv=true; uncs=4; pdhtkv49=true; uncs49=4; u_pl29487205=1; uid_id2=01a075cb-f659-7a90-9bcc-44dd19af834b:1:1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 08:18:29 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 4\r\nHost: exemplarfederallithe.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8e25e7a6f7094fd8cf02f20ce99c7b60\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T02:48:35.597116Z","times_seen":18610320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"exemplarfederallithe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://learnquester.pages.dev/category-top-down251","date":"2026-09-06T08:18:14.146Z","timestamp":1788682694146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://learnquester.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:29:37 GMT\r\nexpires: Sat, 04 Sep 2027 10:29:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164917\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-23T03:00:38.047576Z","times_seen":55711,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":29,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}