{"report_id":"18de9ce1-7389-4551-94e7-f4adbdb197b5","version":6,"status":"done","tags":[],"date":"2026-05-23T13:23:35Z","url":{"schema":"https","addr":"sativa.pages.dev","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sativa.pages.dev/app/","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"title":"Home | Mainnet Sync app","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-05T23:58:16.073967Z","times_seen":1035494,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sativa.pages.dev","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T13:23:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-23T13:23:13Z","timestamp":1779542593,"ip_dst":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56178,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-23T13:23:13.795423+0000\",\"flow_id\":1993331538260149,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.34\",\"src_port\":56178,\"dest_ip\":\"172.66.47.195\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"sativa.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":918,\"bytes_toclient\":2700,\"start\":\"2026-05-23T13:23:13.782517+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-17T22:48:39.617247Z","alert_count":0,"request_count":1,"received_data":20321,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sativa.pages.dev","ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-23T13:23:36.3718Z","last_seen":"2026-05-23T13:23:36.3718Z","alert_count":23,"request_count":23,"received_data":659264,"sent_data":10880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c19737ca7d4e8111a4f97020436d8af","sha1":"d5b3ae332f81b80f4d52c78c17fc2d1f06da2e06","sha256":"b2144ab14fb9554907b943575afe187a9bff99d6f092bee5a16af19a001ce403","sha512":"3bafa84f38fb839326f6a429dcc215202e8e3a3719abbb438e0ad7a71218c07812671498b42da41ea19f04551f0cbdc81a43c93804d59f57fd7a9bf6cabeb31a","ssdeep":"","tlshash":"7dd097b68d3489302388034b30b3d3a8262126d07b12ea0080c9cc2b2f32ec340b1858","size":236,"data":"","first_seen":"2026-03-24T17:42:12.627766Z","last_seen":"2026-07-05T09:39:46.868459Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0d1129205bf4dfd0828cc92e2571eb8","sha1":"98117a29bd6be7c4e64e3e11bbdd2ced70c2abfa","sha256":"7f1ea97063cc34a49f7051b5c9d285cf34870b77e9f9a391ab76f893cc70602b","sha512":"33f5417521747773e3d49638071724ffa69bba591fd527606f7c0efa9e44b03f0e0c83ec30f07c65cd1a4f19fe0751a2ad0d906c90db28b4dce79a8d7bc56d1c","ssdeep":"","tlshash":"82210d3f1aa30034d657611923bfe7583e3090532202d8c07b9edd999f10d2650beeee","size":1363,"data":"","first_seen":"2026-03-24T17:42:12.63047Z","last_seen":"2026-06-03T09:21:26.793046Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bfb59177660d8acaaff78a92331170e","sha1":"2514579cf4995c678dc2d79748a3eb88def442e9","sha256":"ef2cf5e8966da5d677f58e286a5f9d8be4e508ee1067c13da57f717c173de88a","sha512":"d73e78d8e35141955df289ee2b681f72cd50d17b3e79a8e71136ec507c76e9c71e7b214f12e57bd773a359e7aa5038c6111f95273ee930e522993815740413c6","ssdeep":"","tlshash":"4651cbeb6bf2133245a37768278fa3647631800771189e743d9d93824f58e3255e17de","size":2969,"data":"","first_seen":"2026-03-24T17:42:12.632505Z","last_seen":"2026-06-03T09:21:26.793577Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2be2e84a265325defca6aa22c3aaf314","sha1":"4b65caead9ac2acc82709dad701bd75012c407ae","sha256":"5fc4c6a77ab10ca123cdf837e50376333e77ba7f420a6e707536aedd68dd48d9","sha512":"944efe5c8903d7c4ba91e93b36085edbeb72b1da24356bed5baa2584adb23391415ea6b0b78cf450766c8a85b4b362e7b927b5cac810bd0f5445831368dee98a","ssdeep":"384:teIG2cbiC6mCPqjxL3qbBfwEBtFQ5G0N6nPHukW38HiMtbMwv12DoxfSrMIOKiQz:teIG2cbiC6mCPqjxLABfwEBHQ9qOkWFV","tlshash":"07b2a7c5b1c770e983b17037106b6cda6febadf8201c4558d110a9b57cf5308b976ae8","size":23504,"data":"","first_seen":"2026-05-23T13:23:38.083011Z","last_seen":"2026-05-23T13:23:38.083011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/wow-1.1.3.js","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"655c24df38c14e9664fbb7f98b5c096c","sha1":"b5165a6e6ffe43dfee45abb44330498a4392033f","sha256":"b70f0992992c5256be20edfe92ff9f999170d1a4d2815e6e44732a432d2a0862","sha512":"09c2a5df7aba14036920b2b85946b7e6f589ee17ccc89410ca2b7fcb04612290f4d668e491e7624d84cb830a51935bff1ebf61f554d36202f675d554966240ab","ssdeep":"3072:i6YOEPbwQqAvLCogPxvNA7Riy0okgm1J89aGwNx2fZa2If8KZu+TwTVj:ilPbAYLC3PxvNwRitokgm1J8eMV","tlshash":"e1f3f858baa360bfc60ba1dfe6b2a91956a00c2354489f7cfc5dc3d05f118a142fad7d","size":157677,"data":"","first_seen":"2026-03-24T17:42:12.605174Z","last_seen":"2026-07-05T09:39:46.849589Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"540e5e52ccecc60f8bf053c49bd28316","sha1":"23c1dfc5f76e933a484a818a3b38c2f96ec10d3d","sha256":"88dc03998362f7f637734816d6f86f6bc2c80c3ca4efdce8a74e642b6d3ea303","sha512":"abc98d1f28b78b01824795c88a83f0add0d2c51c6bde0adb2d38dd138a6b57b59043f2c5bbbcc59c28ecc7e683774ad90b4b1fce573fe0d14837dc29acea0a7d","ssdeep":"1536:9RJStagKr1Z4DluEjhqihjVdflIovui7WF4sQgVFtYhkglwMtw:9RJStagKr1Z4DluEjhqihjbf6ovui448","tlshash":"11337788c2966f52434cf3d7a8e3574868302487dcebec8c6232514cefa59e552af56f","size":51016,"data":"","first_seen":"2026-03-24T17:42:12.626077Z","last_seen":"2026-07-05T09:39:46.862821Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T15:42:56.635628Z","times_seen":337638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sativa.pages.dev/app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sativa.pages.dev/app/css2-2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 37828\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"38b3a05093ba6c4ee89fa13ded5a8a35\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJFYl30oV7vZ4u%2B3BB4NmYSNaFsQq4XOTG8jz8getvU0YQ2w8279rGK0BL6RNdzpHzRFZHOrmzmy6Ob4YJEvEuyXcfbrXT7uZkBEwrVI3MwzO3qCBTpTVr9OWB84Yt8W15DI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc00daa56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"e0b05ccbd5b6004a449ac84b466c29ac","sha1":"bcc0e513caae5f6f4164b58eaaa46eaa49622322","sha256":"1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6","sha512":"abc51775b8a82afdd427b2c78aff0c23c95d19bfc7045503724e9ab4f3ce5a6b821d9b10cab9e0c6fdaca2f61c81049d583254952556f42dc147ed53a27b42e3","ssdeep":"768:PqSDNU3XMET3F2NSOiow7Lt/omB7y+/gHII7knqVHQTp4pT:PqSDNUHdT3gNS7/omFnECTp4B","tlshash":"5f03e14522f601c8f245da77fa395d849f731e00379e4ea05846c64db9b7c22aa92d2f","first_seen":"2024-11-22T05:36:25.159388Z","last_seen":"2026-08-04T18:59:03.38337Z","times_seen":38029,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/secureproxy?e=jscdn/getFile","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://sativa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"8m6yzaoyhy23qzs9wcjw\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXutGuwpOzoyJWbjpScRWGZhiIok9lx9W%2FbOWWvntN5Evj9mmWv82zSuyQxxdzeyRMAHRITrOJEUtRBqiyiJk5WX8e%2BzfVe2x9AzJPn%2BDDRhZK5Iz8uINOeR25w9rZYkx5Yr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc08e0a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:03:28.80283Z","times_seen":17733595,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/favicon.ico","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QHh39XraPCWABQTjiGAL4SI%2BWG4hBROGfyQ5KbQuOWLNfGsNIhFTBvi8JVWg2iIfaCe2k6BaJIejf%2Bv5Ih3ceEQGMK1v1S%2FxnDBKJeWXm0lOxEcgGFZEnSqXXdMRRcr3%2B9Mo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc0ae1d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:03:28.80283Z","times_seen":17733595,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev//app/secureproxy.php?e=jscdn/getFile","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"POST //app/secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://sativa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"8m6yzaoyhy23qzs9wcjw\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1KFxFMP6d5pi9lZcT1tVDxEYET8ySfOCo6Xz8Q%2BYbyW%2B23dqUxvNeA3bdwPgjWpXmXbhN0QKPL%2Bllt2DKA9FNIimgrlZqZghA7MTmPCrFgL2UtYj76Wija9oBOO0Y%2Bitc4A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc12eb856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:03:28.80283Z","times_seen":17733595,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:23:13.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 23 May 2026 13:23:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://sativa.pages.dev/app\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tp5MPlOaS76FDQJdDeWW74h2ntgQoTqpsMAGlIgZBWtShpw%2BOaclmitML01NcElPulm084KGfyIKid8dWUfK9%2F6WP3IeB2TJ8UMZjKBAGyfU1UcVkbf8RRcVnMZM83K%2FtL2r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0045fbb4f2c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10441,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:03:28.80283Z","times_seen":17733595,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":26,"dns":6,"connect":1,"send":0,"wait":26,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:23:13.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Sat, 23 May 2026 13:23:13 GMT\r\ncontent-length: 0\r\nlocation: /app/\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIrGxP7ggbsj80ZC0kMM6XNqrLdIUQQe87lSIRoPdirasfl6hstZKmWMc7Q09NrUAfk6kKXmmVLXY%2FZZCYC1HsP%2FwK6%2Bt%2FyzhjmvQtQZDoBPTIT%2B6euBkL8uCtWZ7656ZAkK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0045fbb8fdd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":10441,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5c959a8e09d300e4ab94599dd5203706","sha1":"c44fac21c19b4ae87b21eafddf5eac1e1ab4857f","sha256":"e064ed6eeadfabd54d5ca331fd39cbef40184c7cb0818fdc6ee0915e1eb3fca2","sha512":"c2f756b54b42f7b143ca45e8b756c0d7b4294e634fb899a6c94bcbd6fd7aeda20904eba645a5381b633e89fa84269ae5d41945b3beeb45b13d3a1a166fc2b5f4","ssdeep":"192:PKJUaGdNfPC2kIUnzDyRLyh+ldM47ieiLSEZ+Y2l5Z:qGdNHC2kxnz8OVKieiOv9","tlshash":"d222a76b2af3073261475695676bdb29bee48003a209c4a47bec43c54fe2e42c1db7cd","first_seen":"2026-03-24T17:42:12.599966Z","last_seen":"2026-07-05T09:39:46.853491Z","times_seen":27,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sativa.pages.dev/app/css2-2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 37828\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"38b3a05093ba6c4ee89fa13ded5a8a35\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eA%2FbD1nWIbhr0z4MLy%2BPnOtt9Y7vJme2w5T3HIF5IT5jFTvcqqYCH2QPuqIsy33G%2Fd9nxyJvkMsfdwNJ4UzdtFSiiic8z5aS992IEi%2F%2BNgM06qHdQyWs0GlWK4iQ0cQPlZ7%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbffd9c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"e0b05ccbd5b6004a449ac84b466c29ac","sha1":"bcc0e513caae5f6f4164b58eaaa46eaa49622322","sha256":"1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6","sha512":"abc51775b8a82afdd427b2c78aff0c23c95d19bfc7045503724e9ab4f3ce5a6b821d9b10cab9e0c6fdaca2f61c81049d583254952556f42dc147ed53a27b42e3","ssdeep":"768:PqSDNU3XMET3F2NSOiow7Lt/omB7y+/gHII7knqVHQTp4pT:PqSDNUHdT3gNS7/omFnECTp4B","tlshash":"5f03e14522f601c8f245da77fa395d849f731e00379e4ea05846c64db9b7c22aa92d2f","first_seen":"2024-11-22T05:36:25.159388Z","last_seen":"2026-08-04T18:59:03.38337Z","times_seen":38029,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/style.css","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/style.css HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ph%2B7uEuUkVXOJ4mKbZ%2BHMWL024XBGOEFzd3Lwqv8STtAHpO6SWgjpEI0f70a482zHnVP0lUGvtdmNRSXgID51P6l8hKOSWXyjxYDQGs0beaVA1NsChwTBDS22lPvw9Bi3Xy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4a9dac4fadfe27270323228eababf23d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text","md5":"10061b4b3ad2d7c28041cd0aad3e2474","sha1":"a93c9fb314c5c0c3ecb27cb698edf851542803fe","sha256":"b1dc2ab9ddc7659d6f5142d35a459c9c6904d6d72fa393511bd0ac7ecdb1f06a","sha512":"2efdbed1eb5f4ddc28f210751e85c765e81e3f2bfcf890a14df736d8f5e107c8c00a52f770c96a1504e3f1d048f75e91491dbf1c83aafea12e625e3ab9445559","ssdeep":"768:AvTO5y979/27+At+tsPhzCxBv8NCKJKOAB+Y0vjK:pGtsPhzCxBv8NCKJKOAB+Y0vjK","tlshash":"bfe223525af32c04a84f48592bee9784225c90838d0ec95cbfc96648df8d27975e6fce","first_seen":"2026-03-24T17:42:12.614004Z","last_seen":"2026-07-05T09:39:46.859393Z","times_seen":27,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/gqc.png","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/gqc.png HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6606\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"aafe6a4e6f2b323a6a2c85ecbb385479\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7dQkeRjcOHZALqyP%2F8tpb07DJ4Ybi9JBTv%2BXmJ7cvTceLwbua2O5EsgPktP%2FVqrJbDczuHQYKAj00yEMKCVLqQ1K%2FIw3Eyr1fwkDhEQHSZjU%2F%2BVp1rIdzcmAN1DdjHvyOoV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0d56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 16-bit/color RGBA, non-interlaced","md5":"da0aecfa3d793966209144fd1a38c750","sha1":"64ec3f0ef9e6ec6ddc7e2c0f0a2bc1182106fab8","sha256":"e87bc8593f7f208660a022d65f339dd12d3b7099be5b1d4f4f7763ae016d26fb","sha512":"5f6d5090126618f74f09e2491860a54acf35a3d3a64932f6cd5a703472d02a98498d8e521c0c7b3bf832d3f292fd953ef106db0f1b0262848f1bc93b7661b2a7","ssdeep":"96:nZLNkHzZZzN3hEXzi2puP5IjZnssgZQ5oEbMlWBgAEQ+1x1pfMd7pcYudkZ73qK1:ZLNkTnh3emwu+jq3Cg4eQ+L17kZrqth+","tlshash":"74d18d2c87edd5f7b485023b96df433a7b3764902a50e3240df15c1a4a5b82ecf9ae21","first_seen":"2024-10-04T10:52:13.426621Z","last_seen":"2026-08-02T04:09:05.06062Z","times_seen":57,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/bim-foot.png","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/bim-foot.png HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 128307\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"a13dc1a1af5143f48fc407f558698c12\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR6LIIaxtJjvhuy5AGYCyAGuT56joVtpdxXZs%2BdfkAg9v0M3MGrrGHNnbHMbIY63mqiisphB6xBxWTQFeBHw0j4ozw%2F2hQT%2BLSCsSR761F4HClSYseHyl7CSgMbC%2BBy7EEmZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbe0c1456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1376 x 416, 16-bit/color RGBA, non-interlaced","md5":"da7127a5b3f67cc6c60c061293de8594","sha1":"2841f6863e3be2329be26c8c67539ef16d510da6","sha256":"dc3d36b17c76127bd2ceea257b3b180c5a4469cb21c4f680a6054f6e6d3fa750","sha512":"251d8900c6e3636cc145f761fc078c8d907fda3ef04c2c03e8f716a7b3491ca96d399ef1fef6dfbb500f25dabfc0fb1d73b84239fb054eb0904a9c93f3168b1c","ssdeep":"3072:4NkzQePDgTuoay3WUue7rClOrF0d10tHikZubvD:4iz5PDgTuvymUuajrIpYuf","tlshash":"14c39b17cc24389f9129904073eb35d6ea7a21633266bf6f1f6240b5ee8b8d4f934d58","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-08-02T04:09:05.064231Z","times_seen":81,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/css2-2.css","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/css2-2.css HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/style.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJYzHEMtVNwBQoM0RL2eTktD0SYbWXz8lArSBM13kKVgvN7Gaz8wVZ8X8ufmF%2Bp%2FsEu3RnuUwvfKW9S8LzgGANKSgfhU8X1TZOyQcc8MkTL23YBrC0DKDwf%2BGYYOOQw2KYXz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3de2d8499b0430441fb328acce0ca1c5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fbe8c8e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6673dc79460f862c96076609cab3c778","sha1":"94b56e28c95855edb6ea8b1762199e4f169dd84b","sha256":"f4fb3be5f1c047828db6db6a900aefdddf69cbb45bd1094721f840c48e9e2116","sha512":"45099c998525327b49b4f709a039a7fa9ee97ae7b85faf1e9612a6d12a4c22ff4a5b0ff2596b7136925f1001911be4794bca1631f6b2d887758e7d21f9595123","ssdeep":"768:O7m7+7R7l7P5h2eAA8T3pnbckOO2JNnNFaCcUAnLlrPgoKiKdheGrvRE:B","tlshash":"a2d28050142b7500b2932cce23cf3e278a4da2577095e5203ffe3a687faad655261b7c","first_seen":"2026-03-24T17:42:12.621003Z","last_seen":"2026-07-05T09:39:46.841744Z","times_seen":27,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T13:23:13.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=1,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaIJj0ViPLNwrTeGaWwAldnn33Y%2FAlVeQrtiwBAO75dqPTpfFf6R%2FGfElQ0WSk9Fb6E0XfuqotMsN8g5ZjiKL9USNuqEGMOEsgy0uLH2OprrdzSMwLzvcRff%2FUq%2BCRx5KxiB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fbc4a8a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":10441,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5c959a8e09d300e4ab94599dd5203706","sha1":"c44fac21c19b4ae87b21eafddf5eac1e1ab4857f","sha256":"e064ed6eeadfabd54d5ca331fd39cbef40184c7cb0818fdc6ee0915e1eb3fca2","sha512":"c2f756b54b42f7b143ca45e8b756c0d7b4294e634fb899a6c94bcbd6fd7aeda20904eba645a5381b633e89fa84269ae5d41945b3beeb45b13d3a1a166fc2b5f4","ssdeep":"192:PKJUaGdNfPC2kIUnzDyRLyh+ldM47ieiLSEZ+Y2l5Z:qGdNHC2kxnz8OVKieiOv9","tlshash":"d222a76b2af3073261475695676bdb29bee48003a209c4a47bec43c54fe2e42c1db7cd","first_seen":"2026-03-24T17:42:12.599966Z","last_seen":"2026-07-05T09:39:46.853491Z","times_seen":27,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sativa.pages.dev/app/css2-2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 37828\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"38b3a05093ba6c4ee89fa13ded5a8a35\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ico%2B%2BSOvyyOCCCBdhOOf3dU3zWy%2Fyva%2BOdkXNnUtiDdZ8uGsVMESsaa%2BqAOJcyvO1elk7Lf2Q5ATlmrF906ABFGjeuRBeXvOzVIvRKqQbjK8V6RamgF%2B2wMjGVU65gWC01n2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc00da756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"e0b05ccbd5b6004a449ac84b466c29ac","sha1":"bcc0e513caae5f6f4164b58eaaa46eaa49622322","sha256":"1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6","sha512":"abc51775b8a82afdd427b2c78aff0c23c95d19bfc7045503724e9ab4f3ce5a6b821d9b10cab9e0c6fdaca2f61c81049d583254952556f42dc147ed53a27b42e3","ssdeep":"768:PqSDNU3XMET3F2NSOiow7Lt/omB7y+/gHII7knqVHQTp4pT:PqSDNUHdT3gNS7/omFnECTp4B","tlshash":"5f03e14522f601c8f245da77fa395d849f731e00379e4ea05846c64db9b7c22aa92d2f","first_seen":"2024-11-22T05:36:25.159388Z","last_seen":"2026-08-04T18:59:03.38337Z","times_seen":38029,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js? HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fc05ded56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23504,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23504), with no line terminators","md5":"2be2e84a265325defca6aa22c3aaf314","sha1":"4b65caead9ac2acc82709dad701bd75012c407ae","sha256":"5fc4c6a77ab10ca123cdf837e50376333e77ba7f420a6e707536aedd68dd48d9","sha512":"944efe5c8903d7c4ba91e93b36085edbeb72b1da24356bed5baa2584adb23391415ea6b0b78cf450766c8a85b4b362e7b927b5cac810bd0f5445831368dee98a","ssdeep":"384:teIG2cbiC6mCPqjxL3qbBfwEBtFQ5G0N6nPHukW38HiMtbMwv12DoxfSrMIOKiQz:teIG2cbiC6mCPqjxLABfwEBHQ9qOkWFV","tlshash":"07b2a7c5b1c770e983b17037106b6cda6febadf8201c4558d110a9b57cf5308b976ae8","first_seen":"2026-05-23T13:23:38.083011Z","last_seen":"2026-05-23T13:23:38.083011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/swqc.png","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/swqc.png HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6538\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ffb1f5595b147b6403615a744910c286\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=146tow5FJN2QdrSp8FaHRZhlZB89mX5lzDLVKujTKqaqm4H1s7PM1wsyUOMwjvtYP180lTP6bcqkLds9olL6Aay5CfTT6zcCAa9cadTXXP%2Fc3mjd803D%2F34Cu72kqoHetOvw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0e56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 126, 16-bit/color RGBA, non-interlaced","md5":"24e2aac758ada355a8fcb694188e9281","sha1":"d5ba8b8d2324b56170b0f095612bd489bad4743d","sha256":"ad366f3e48d4b649c6b1c719d222739d6db182704104f7dbeb86a82bfab71ef1","sha512":"e30caa41bec4d6422e08ba7161f97f8b30c5786f9e64067db9a4104c31289175fbc8895e56a608cc1870f5a16ad1cea72a571ac3e9f1ebc2e3556ccfb1be5f83","ssdeep":"96:IZLNkHzZZzN3hEXzi2puP5IjZnssgZQ5oE9JR+0UNyAw1RLaTUf6hAjg:6LNkTnh3emwu+jq3CbRvUNw1Rmhyjg","tlshash":"e7d18d38c38be83fe4881635009b627678376414bb55a52143d2e0999ca8e49df6ff73","first_seen":"2024-10-04T10:52:13.428267Z","last_seen":"2026-08-02T04:09:05.061649Z","times_seen":59,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc03dd956bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23504,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:03:28.80283Z","times_seen":17733595,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/secureproxy.php?e=jscdn/getFile","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://sativa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"8m6yzaoyhy23qzs9wcjw\"}"}},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AihGZynPoP3vCRPbF6TnJgmZHy7AaWT9cf8MuHWzmWRmiSVb%2Bxrv0xKQsbPzvFFpyA1mOWCLJiv0h53wwTNA8XQpjT%2BylBkDMzE0qwV0CH6CTY9wkPQzyspQHV1eup0g74LC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fc0be2b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T00:03:28.80283Z","times_seen":17733595,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/wow-1.1.3.js","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/wow-1.1.3.js HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEbetR9GLZTfqSDYQjtQY23LRbYaofj56wrOqFN2qnOzgkCKSnRpwRj4xfRi9o6e4DKLKxRDrIJVWBgX8JfPPEeKd5cF%2BeQla9uzG4LstHq1SFZeZ1dKXD373auxBG9qNPa1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c71f03b11f65cb2104516c5c778f98b0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0456bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157693,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37606)","md5":"655c24df38c14e9664fbb7f98b5c096c","sha1":"b5165a6e6ffe43dfee45abb44330498a4392033f","sha256":"b70f0992992c5256be20edfe92ff9f999170d1a4d2815e6e44732a432d2a0862","sha512":"09c2a5df7aba14036920b2b85946b7e6f589ee17ccc89410ca2b7fcb04612290f4d668e491e7624d84cb830a51935bff1ebf61f554d36202f675d554966240ab","ssdeep":"3072:i6YOEPbwQqAvLCogPxvNA7Riy0okgm1J89aGwNx2fZa2If8KZu+TwTVj:ilPbAYLC3PxvNwRitokgm1J8eMV","tlshash":"e1f3f858baa360bfc60ba1dfe6b2a91956a00c2354489f7cfc5dc3d05f118a142fad7d","first_seen":"2026-03-24T17:42:12.605174Z","last_seen":"2026-07-05T09:39:46.849589Z","times_seen":27,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/syw.png","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/syw.png HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6617\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"69d6bb93b4c6952921d56c403a89f2eb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyllCll3SJsd%2BhXx3ASPZfBtlk0GnBfUBTxZDdh%2F3ldFA3vsnseim5wle161cegJl74VMgvM76WzJS1JFK9SnSbY4asgLpQyUpn1HTW5EUBQ5CxGJ4aA%2FwhvwNwBOdFE0Wh3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 16-bit/color RGBA, non-interlaced","md5":"d956d7b5a800f2486c85772a1776cd45","sha1":"f68a3b4cbc6b056833ace89095f0124ca46a5aff","sha256":"0aa48fc6626143fb0f19c2890b3b0403142a84600cbb389eaba3d550f8388444","sha512":"5a57578506281f72536d0c61b9ee0c2934f4960f52636b491b8561504f7f7db41157d47e65c557498f919c44ad2827981757f239f85a7ffc36603dc5b3a93991","ssdeep":"192:ZLNkTnh3emwu+jq3CnvJnQHSGwSwNOiUAold7N:VNkTnVemwhG5wtzor7N","tlshash":"0fd18d28868b47b6f1242121998f57207f271c41964494249b627dac1c7770fffd9d5a","first_seen":"2024-10-04T10:52:13.43021Z","last_seen":"2026-08-02T04:09:05.063731Z","times_seen":59,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/\r\nOrigin: https://sativa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a0045fbe2c9cb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T15:42:56.635628Z","times_seen":337638,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":16,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://sativa.pages.dev/app/css2-2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-length: 37828\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"38b3a05093ba6c4ee89fa13ded5a8a35\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2B7hGGH87wTmdEXnl8TmT4oMiEo%2Fjnr5MIa8Txxgexi0g6Wk7nOvPyGmBezUEDuv9oYhd7ipcLIpkHYzenByDkrgpQb6wqBXUfJCcyb0ElsSychWUmwAqcw0%2Bnknqlj1wMct\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbffd9b56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37828, version 1.0","md5":"e0b05ccbd5b6004a449ac84b466c29ac","sha1":"bcc0e513caae5f6f4164b58eaaa46eaa49622322","sha256":"1f1ae80aa76018cc05e840a37f41cf860211bbe368971f54957bf8ebb3c863d6","sha512":"abc51775b8a82afdd427b2c78aff0c23c95d19bfc7045503724e9ab4f3ce5a6b821d9b10cab9e0c6fdaca2f61c81049d583254952556f42dc147ed53a27b42e3","ssdeep":"768:PqSDNU3XMET3F2NSOiow7Lt/omB7y+/gHII7knqVHQTp4pT:PqSDNUHdT3gNS7/omFnECTp4B","tlshash":"5f03e14522f601c8f245da77fa395d849f731e00379e4ea05846c64db9b7c22aa92d2f","first_seen":"2024-11-22T05:36:25.159388Z","last_seen":"2026-08-04T18:59:03.38337Z","times_seen":38029,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/cdn-cgi/rum?","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\ncontent-type: application/json\r\nContent-Length: 1083\r\nOrigin: https://sativa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1083,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":781,\"startTime\":1779542593764,\"versions\":{\"fl\":\"2025.9.1\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"fae6dad6-c6df-4f18-90d7-132affec051f\",\"location\":\"https://sativa.pages.dev/app/\",\"nt\":\"navigate\",\"serverTimings\":[{\"name\":\"cfExtPri\",\"dur\":0,\"desc\":\"\"}],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":804,\"domContentLoadedEventStart\":824,\"domContentLoadedEventEnd\":829,\"domComplete\":889,\"loadEventStart\":889,\"loadEventEnd\":889,\"type\":\"navigate\",\"redirectCount\":2,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h3\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":195,\"fetchStart\":196,\"domainLookupStart\":196,\"domainLookupEnd\":196,\"connectStart\":196,\"connectEnd\":196,\"secureConnectionStart\":196,\"requestStart\":197,\"responseStart\":262,\"responseEnd\":262,\"transferSize\":4066,\"encodedBodySize\":3339,\"decodedBodySize\":10441,\"name\":\"https://sativa.pages.dev/app/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":889},\"siteToken\":\"3e8d8af8eb8d4d60a6a05b900087263b\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3tmjpGZoFAkGZ1S30ZnN2d9wnsonKn0g8o4bwFuC78DtW%2FuGoTXLGN1eO8ltRJSofyp1DrNOLOcQmzTWJIaV0z7G4vwgwNPQSvwnk95UHYGM6bKPcKzd3G%2B%2FsE0cggY6a8N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fc0be2856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-05T15:42:56.62159Z","times_seen":19396,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/font-awesome.min.css","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/font-awesome.min.css HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R06hIPQpfEKaCPo1Tl6WZO%2BDAIrx0YeejIJqxd6PpzUoPLO6hChYngDyLHxMXkHwGTd8xruWECfgep2K0%2B79blDuF2ZOUutn5AKpjss1ItPn2%2FqNlS7zAczx7SvtO6z8%2B1vM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c8585076651d1b4a6b8d6987894efe44\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0a56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38435,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text","md5":"28bd102cf90a47dc35152b394b6ee558","sha1":"afb2713773d39a8cf6f6ee9f27a46fb6341acb52","sha256":"6df71b6f49847a1d6af3dbf54d5d400ee7883e66d000b519f5c29612cc192abf","sha512":"24952cbc41ef44b3a7fbe4b0da52558f48b4a5105f9727c93169a6bab5ae1fb70b3bddda2ad6d5a1d0b78014b3475a767c0cab45313a9fbb0c0caebf2767c3e7","ssdeep":"768:vaAoLzBbi6U1wkxZTIH05BQIgf03DIPgm:v3oLzBby1JxZEHCmIgf1Pf","tlshash":"8d0315acd5bf18914319e4c5678ba240b325bbaf8d484c5cf286be8cdbc167581c2bdd","first_seen":"2026-03-24T17:42:12.607795Z","last_seen":"2026-07-05T09:39:46.83886Z","times_seen":27,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sativa.pages.dev/app/vyw.png","fqdn":"sativa.pages.dev","domain":"sativa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sativa.pages.dev/app/","date":"2026-05-23T13:23:14.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sativa.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 May 2026 23:14:36 GMT","end":"Sun, 02 Aug 2026 23:14:35 GMT"},"fingerprint":{"sha1":"B7:9E:30:00:7F:EE:69:70:D3:AD:57:8C:12:F3:CB:7E:A3:B7:BD:1F","sha256":"69:E7:0A:99:50:8A:78:C0:49:DB:32:4B:D8:FC:F3:17:0C:28:0A:03:D9:CD:4D:C2:8D:20:EC:59:48:87:1B:A8"}}},"request":{"raw":"GET /app/vyw.png HTTP/1.1\r\nHost: sativa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sativa.pages.dev/app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 13:23:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7510\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"302c7849402da9d149cf536d96649f2e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlfrSZ9FKu5wTRNM%2FFnA0qBCwOJ816KeUus5OhGAaDs2phm8JZkwsWDA7Ip2hCs1%2B4w4Cn1dCNM0BkPG%2FHcQ%2BDz%2BOe5bD5BqKb3iS3FmIwV5%2BRuwdU8fpCFNlBvUsqdz6e38\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a0045fbdfc0c56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 122, 16-bit/color RGBA, non-interlaced","md5":"65590838199ce9d770a4c740b5664832","sha1":"bc0babf1f34a4a141015eba9e7b7b28507dd947c","sha256":"4be58dd01f5864c87c3b3b60139b9d7864aaf46f7f66999eb0afca062f9443da","sha512":"90902183df271a433a9bab470070e1c763e1c1ce957af26232b2cc610cf3cc378af529df5928d8924cf74681fa250f14e2cea4fe75ee8ddfb935738fac7e482f","ssdeep":"192:KLNkTnh3emwu+jq3CqKJhh9ziPKwAvguaxRD:WNkTnVemwh6U9GnCgjD","tlshash":"cbf1b031cd45607edc696539432b0f35a63360b42e416227839595dc365ad17bb6bfc0","first_seen":"2024-10-04T10:52:13.431956Z","last_seen":"2026-08-02T04:09:05.060102Z","times_seen":59,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"sativa.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}