{"report_id":"17a9f6d6-6059-43d9-93f0-3a64c4fb4a43","version":6,"status":"done","tags":[],"date":"2026-03-29T13:58:17Z","url":{"schema":"http","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"title":"Microsoft Sign-in Redirect","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T13:58:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-29T13:57:53Z","timestamp":1774792673,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-29T13:57:53.804777+0000\",\"flow_id\":1868981591943001,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":43400,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.24\",\"port\":43400},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2596,\"start\":\"2026-03-29T13:57:53.796505+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2025-04-03T10:32:37.568684Z","last_seen":"2026-03-29T12:54:58.158942Z","alert_count":8,"request_count":2,"received_data":45383,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"logincdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":23083,"first_seen":"2019-04-23T01:13:28Z","last_seen":"2026-03-25T15:05:32.597759Z","alert_count":0,"request_count":1,"received_data":4352,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-03-23T05:38:41.369782Z","alert_count":0,"request_count":2,"received_data":815999,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-22T23:53:46.752956Z","alert_count":0,"request_count":3,"received_data":2465816,"sent_data":1495,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets5.lottiefiles.com","ip":{"addr":"172.64.149.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-03","domain_rank":1873573,"first_seen":"2020-11-16T17:45:01Z","last_seen":"2026-03-23T12:38:09.471974Z","alert_count":0,"request_count":2,"received_data":277471,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"prod.spline.design","ip":{"addr":"54.240.174.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-20","domain_rank":1418142,"first_seen":"2023-03-09T07:21:21Z","last_seen":"2026-03-24T14:15:01.335704Z","alert_count":0,"request_count":1,"received_data":531,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-26T09:57:26.365947Z","times_seen":46410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-07-26T09:28:11.310778Z","times_seen":4730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f58ffd4fc3ad4fad71d90b5922109e7e","sha1":"a9209eefd9faf424012b06f9318e9111396a6cd2","sha256":"8b1ec21a36f7fc8946af1a6e6506d4beb021a9354851549deac984d44e4ce308","sha512":"55c18862e96854e947249681164af9fafe946ec9eebe98b92e3473cc1beeecd5190e0f44a1f1f5b502ba2b5d17650e572a8dee702921a6b880b0edd63dcc6af1","ssdeep":"","tlshash":"bd3136fc18f34517848711ae86cfa33a64a854e74d2bbcaa365d48898fc91cc12b4b79","size":1571,"data":"","first_seen":"2025-02-26T13:52:21.256576Z","last_seen":"2026-05-09T18:32:54.826822Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6d5a090e3150aa9af94092bcfe9894","sha1":"1da725846f7c644e56eb1536607098d9173c9bfb","sha256":"45476948bbac9896ba3148290c27d68a4b8b6f45481099f5bac9b62fab75acf8","sha512":"776f90ca2e88196397dc012ce70348f70642a93269fd4ad9fdd57c62c0a6e03d3f76518ec425a985128541390b617580984e64a1cbfddd9a90d4c2440963aaba","ssdeep":"49152:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4tgJSs89CqqqeC:WaHKPsqPjTxX6","tlshash":"04757de433a57027879b919650760142b33ab4d61809842cbe2cdceb7ba5c4672fffb5","size":1695626,"data":"","first_seen":"2025-02-26T13:52:21.259294Z","last_seen":"2026-07-10T15:06:51.919079Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05c8d5fd92d33ed30222cf785c7cf9e5","sha1":"c9b7da2db357e659f8e8f721eb93d8ed2f431336","sha256":"a3d8415b06b0643a68939db478b3285c6ca04e042028ed8240cbd25916ece6c4","sha512":"ce32f8e472941b2a731ce44fb9660ded87e5cf3f390694cf31f8441b2678e12ec98fb95349cb3f448ef4cb643bb3d97366dda0058d862c6dd50e1234106f6ce3","ssdeep":"192:E/wVfnwl27SVTCYiKwuSX1AKihA601IEhQxsswVBFIXtw2MqJy6xpCZCYG4ICkjU:E/GP57gxy9ThQyswVBFIXtw2jdxl+","tlshash":"84223d9d38e321715aa7713e570f610a3936414b340deda8bc5e93001f25f6adae3bd9","size":10812,"data":"","first_seen":"2025-03-31T13:37:51.579673Z","last_seen":"2026-03-29T13:58:21.438767Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T13:57:53.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 29 Mar 2026 13:57:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 17760\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"0a183e58ebe3af1e13de655a861163c9\"\r\nLast-Modified: Tue, 25 Mar 2025 12:38:11 GMT\r\nServer: cloudflare\r\nCF-RAY: 9e3f62e35ded2678-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17760,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"0a183e58ebe3af1e13de655a861163c9","sha1":"5a4447b695c02f5a771497298a6e3e7028cf60d9","sha256":"546b44b4c98d4310717b9ef5163904bb82f06dd5dc5aef6e38600aa19bfc775b","sha512":"57036cec8cd8c5e02dff7f52a0eb4d5f03cbf5d0d10eafa90da1a72894e72ade65f75acd6d9a1bfab92e934f27c78e2f2463b37f003fd7b34d79f27e97267f62","ssdeep":"384:kiSsY1ON59FX/GP57gxy9ThQyswVBFIXtw2jdxln:kiXY1ONhX/GhUoThQyswvFIdwcn","tlshash":"3682b59d38f310325593617ea39b660a3d768507a50edd68bcad43401f82fadc9d37e4","first_seen":"2025-03-31T13:37:51.564752Z","last_seen":"2026-03-29T13:58:21.432136Z","times_seen":33,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":27,"dns":10,"connect":1,"send":0,"wait":131,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 23 Feb 2026 11:23:25 GMT","end":"Sat, 22 Aug 2026 11:23:25 GMT"},"fingerprint":{"sha1":"94:EC:8C:D6:B7:48:F8:DD:3B:0E:7C:0D:63:D7:88:40:79:77:F4:B0","sha256":"5C:89:65:8E:B8:96:C8:6D:5E:AB:A7:96:66:76:20:2E:12:45:94:2A:DC:C2:FE:52:08:18:F5:AE:26:15:C9:64"}}},"request":{"raw":"GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1435\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 01 Nov 2024 20:25:02 GMT\r\netag: \"0x8DCFAB34403395C\"\r\nx-ms-request-id: f1237ac8-401e-003f-53be-ba7c4a000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260329T135754Z-157fb874dd7wfr8lhC1SVGeqf40000000ggg000000000amh\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-07-26T04:13:14.020593Z","times_seen":127922,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":180,"dns":162,"connect":7,"send":0,"wait":9,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rhz55-1772419043268-7fdcc195e7a4\r\nlast-modified: Mon, 02 Mar 2026 02:37:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2373630\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKWxWrhAnY%2BIUQUDHWT9sdd7FNCbIyP%2Bmrlt%2BQRIKy%2Fe7gxJFaPI0%2FSxvsO3RodzEGuWbS%2Fwzs70orT0c0cfpZgdvXEF3UpMlhwWs%2Bb605CFlJYL%2BUFN4dByZE7tlb9qH1oltQo%3D\"}]}\r\ncf-ray: 9e3f62e58b32712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-26T09:57:26.365947Z","times_seen":46410,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e3f62e5aa56712a-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01K7QQMF8N1G3GB9FWMCHE11KT-fra\r\naccess-control-allow-origin: *\r\nage: 161124\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 13:57:54 GMT\r\nlast-modified: Fri, 17 Oct 2025 00:03:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-07-26T09:28:11.310778Z","times_seen":4730,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rjffh-1774792186624-741f0a7772a7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 487\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wO9y3XVmPXILCwUuu98rmKjpkgHJsrC1Io%2BXC0fg6mq1dBbuvvtNJAPMLA3ZYjZI7r9ihn86svg%2BpMCwiaL3KTIJ4n%2FKitxS0K9OD1r2tXubEPJ3YlbutHB0zn7GBG%2FMJ6YzjN4%3D\"}]}\r\ncf-ray: 9e3f62e57b1b712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T10:24:04.803362Z","times_seen":17543663,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":38,"dns":22,"connect":1,"send":0,"wait":6,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e3f62e55a07712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T10:24:04.803362Z","times_seen":17543663,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":29,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e3f62e55dbb5ebd-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 220729\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 29 Mar 2027 13:57:54 GMT\r\nlast-modified: Fri, 13 Mar 2026 03:23:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:RUdpSLusmJa6MUgpDCfWikuLb0VIEJn1usm2L6t1rPg=:\r\nfly-request-id: 01KKJKGSMVKDHEQBRAZ04TYA5G-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1695626,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c06deae1e67461e65c7e7dc07f296fec","sha1":"3052613f5387e3c73f852c67e7c5d35e907bf8a0","sha256":"64a21852082e98f3adc3b136c328b46ae9d5c54edbb435ee9d3dbfa448ff9f7f","sha512":"3ab2cb7694010c3cf25810974349a8847ed989541de386307ce347b8fbb329a0c61ce99797abb0e4dade8df069b8070b9e963b5a857d303560a169ea6a50575f","ssdeep":"24576:f7EXabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4t:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxe","tlshash":"b5256ce473a57027875ba096147a0446f33db8e61c08442cbd2c98e77ba4859b2fbff5","first_seen":"2025-08-02T03:37:30.982446Z","last_seen":"2026-07-10T15:06:51.915178Z","times_seen":165,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":21,"dns":1,"connect":5,"send":0,"wait":84,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"172.64.149.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nOrigin: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:57:55 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=mVGdL3fNzFlFToDrxZnxwGZHOmcnxi.i6GV0z9kPxzc-1774792674.7877407-1.0.1.1-tJ6ft_tcpNX.IZ_86LAjvIYWNN2lxaLqLIwTjMxhO2US9j3_vO_3GuZvI7X7xr0zs3DyJrpjALozAJmnEBhyx3FnvTGG.gD1qmRsu4m0xifLo.7LWjQhDMhN24SurAUm; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Sun, 29 Mar 2026 14:27:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0ca3a24436a7d86916b35130b21285a8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: QosWjav8r5B39J04FUE5fNBvqg7Cg7YFSNBv2U1fbubhly0dvn_xZg==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e3f62e96bd5b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-07-10T15:06:51.910993Z","times_seen":399,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":64,"dns":35,"connect":1,"send":0,"wait":521,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"172.64.149.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 13:57:55 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=_AUYq5l3PWpvI.3_Oiv5UJqXqrhkkVICyYfOYqyi3rk-1774792674.7845457-1.0.1.1-TiFDe98VNJJgzyivZq1VbHmu3Ly19YhQ9o55LC030HDiyffbEeR_NoFGqM0.3Dm0uGmo91G3zS69G6GGItNQDvoOhTVe9V8QlQkyfW2ITbxKwOoJduzL1LNAnhzPqJ96; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Sun, 29 Mar 2026 14:27:55 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: eWvws5SFohjJAznOR3QNEXf81K8U6civtYsxI8AnEYVim8X2ppyu5A==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e3f62e96bc4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-07-10T15:06:51.910993Z","times_seen":399,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":62,"dns":36,"connect":1,"send":0,"wait":524,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode","fqdn":"prod.spline.design","domain":"spline.design","tld":"design"},"ip":{"addr":"54.240.174.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:54.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spline.design","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:8F:BC:30:7F:E6:20:54:82:40:AE:8A:6C:E2:35:85:23:4D:C3:D7","sha256":"55:5F:A5:8E:EB:74:A9:74:C5:A3:FF:00:8A:7C:E9:07:F9:0E:37:9F:01:DC:2D:E1:E7:3F:C4:34:A2:07:76:6D"}}},"request":{"raw":"GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1\r\nHost: prod.spline.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/\r\nOrigin: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\nserver: AmazonS3\r\ndate: Sun, 29 Mar 2026 13:57:54 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: MJprWta2ICQaM0SF6PVX9vt3AAUvxiOM2AvpZycIlgo_ViBcManvgw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"b6c792c0f58fa3ec92173c074885221f","sha1":"0dde8fd9111d807e202b2fb37f8bcc4052fd861e","sha256":"a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938","sha512":"83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875","ssdeep":"","tlshash":"51b09201b208a82a19514e3a373cf110e310593102c426a8aa96a88317828914d08325","first_seen":"2025-01-13T10:02:12.3839Z","last_seen":"2026-07-26T06:40:31.039772Z","times_seen":7443,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":91,"dns":81,"connect":1,"send":0,"wait":337,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/favicon.ico","fqdn":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","domain":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html","date":"2026-03-29T13:57:55.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pub-668942aad21b4decacc840ecfb0df6e1.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-668942aad21b4decacc840ecfb0df6e1.r2.dev/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 29 Mar 2026 13:57:55 GMT\r\nContent-Type: text/html\r\nContent-Length: 27150\r\nConnection: keep-alive\r\nServer: cloudflare\r\nCF-RAY: 9e3f62ec981c2678-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"46dd133ee00dc1bae5e4eeba7b88432f","sha1":"8af86a4ac91ce48c062216fb94a6e1d57618a19b","sha256":"9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66","sha512":"cb49f9e3812e2c262af374e79bd8905cb508a45bf2c2d6af62eed85af43770872486a55e9425882feda9fb3a57a317a3c18be1e286adaf0c76be7f1b0dfa8474","ssdeep":"384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3","tlshash":"e3c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2024-07-03T19:18:11Z","last_seen":"2026-07-24T21:54:43.295241Z","times_seen":32686,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"pub-668942aad21b4decacc840ecfb0df6e1.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}