{"report_id":"1bf74d26-76df-4ef5-8964-5b94415673b7","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-03-22T22:22:21Z","url":{"schema":"http","addr":"gemoss.icu","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gemoss.icu/","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"title":"ChainSpot - Add EVM Networks to Wallet","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"6d664a7527a0394b0f1e549fe57680f1","sha1":"0fc24d31118850e437b7284352ba3dd1dee8dd6a","sha256":"ef2cc17848db3a5f2d14efc41b1a41c12ae0f0b42f981d7c02afd99bf72d2353","sha512":"593ca90fbf88131f7255ba9d789826c67ae9a3f3840413096de42cf44f168d819a3c19952bea37ee41c122479d800bc444cbaefb9228de2b532e458f0ac83cad","ssdeep":"","tlshash":"6ae026e91d75c83565f412c630f1e29c1a2061a0ba11e70842dcd8ba9f10fe38ca2948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-03-22T22:22:26.715212Z","last_seen":"2026-03-22T22:22:26.715212Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gemoss.icu","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T22:22:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-22T22:21:59Z","timestamp":1774218119,"ip_dst":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35082,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-22T22:21:59.956925+0000\",\"flow_id\":2222655969654243,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":35082,\"dest_ip\":\"172.67.207.230\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"gemoss.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3441,\"start\":\"2026-03-22T22:21:59.947683+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-22","alert":"Detects file containing Telegram Bot API","trigger":"gemoss.icu/telegramBot.js?v=202508241210","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"gemoss.icu","ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-16","domain_rank":0,"first_seen":"2026-03-22T22:22:22.962947Z","last_seen":"2026-03-22T22:22:22.962947Z","alert_count":2,"request_count":11,"received_data":851896,"sent_data":5257,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-15T22:34:11.913686Z","alert_count":0,"request_count":1,"received_data":2934800,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"gemoss.icu/telegramBot.js?v=202508241210","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"186a01ca4634748e460652e61e1dcea3","sha1":"bd9634a7d098d389980b25d82f9eb2d4e6f5d3e6","sha256":"9372a1d370f3517baaa0f73462c304a0aa0351713378b88589f1ac01690be649","sha512":"c65a2dfdbdb33b54cdfbc5b22bda9f3b07550a9d038d8f5f28a2b5c7f3fe75831b69446ea74a2af7fd95585c92e39d84da1cbc983512be07a0c64da6d78c2dee","size":14225,"token":"8226646355:AAHEQEe8UxI877dd8eP-mVrtVUapbp4SD_k","is_revoked":false,"bot":{"token":"8226646355:AAHEQEe8UxI877dd8eP-mVrtVUapbp4SD_k","user_id":"8226646355","username":"connection_alerts_bot","first_name":"KeySnatch [BOT]","last_name":"","chat":{"chat_id":"-1003026244768","title":"Public Chanel","type":"channel","bot_is":"administrator","total_users":2,"active_members":null,"admins":[{"user_id":8226646355,"username":"connection_alerts_bot","first_name":"KeySnatch [BOT]","last_name":"","is_bot":true},{"user_id":8070726592,"username":"Fox_Gen","first_name":"Mr.","last_name":"Fox","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"gemoss.icu/app.js?v=202344335","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07c49dd7402f12fbcc21ea72e85bbce4","sha1":"7c123e385d1771747db7097a4811c78d3e9bc8f0","sha256":"29256be938085efd52a0e0e81764b41629cf318996bf9639ac9dc1e062f21144","sha512":"e7dec6a035a549b2a891eb5f05c5c241a5efee77810946b9f037aa937cd01773b2c01918aa56925cbb878ae354f7438555a6160e213b31683c73fbf9fcfba10d","ssdeep":"1536:btzqdWWUE6y2rmqiFmdj/b9EKue4q9dbW5ydy9cTeyw:bXWUNpr6EH9WqPW5yXiyw","tlshash":"71d3c7a216fb10344623207e6b4f35127331f147660de8e8fadc83505f96a69c9b7bda","size":130496,"data":"","first_seen":"2026-03-22T22:22:26.719189Z","last_seen":"2026-03-23T02:50:06.204225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"163d138ff41c2539fa49a27ac9961df4","sha1":"8f3a7795b425e2cf9360fabc91521dc203b3d011","sha256":"80774a6bb92ee107dd68165e712b5347297304734d43c527376df0538cbdf49d","sha512":"d7750cfeb686f5ae1029c3b356f64347339da0455d60f7b6d0e33d162e462f03a475a90fd14976c7bb512ea425d3c242850ddc531b7bfca366b40c98d4954a92","ssdeep":"384:Ov770lE+qjI5bsQbsYmZsHB9Bt8ygISJtU03FKJms56TKFRmBBGDkvb:Ov77aIUIQwYcsHZGygvJtRsJmY6TKFRw","tlshash":"13a2b9cf7d897528d279a072106f11c962faefc73048a84bc610b8a87d3671d1b65e39","size":22535,"data":"","first_seen":"2026-03-22T22:22:26.721208Z","last_seen":"2026-03-22T22:22:26.721208Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3921e0c55a535c384c086a372ea84692","sha1":"a42c5140fc10e22f2aa1cd0524486b6030f214f7","sha256":"1e0d757a64cd90dbd22e714597dc08f2a5284f3db237eac27d469302d570f26c","sha512":"7f597ba3dc0bcf9f5f17da33e79af70b956256569663a5c73e53dcdcbeef78ba7a2060b9cc3bd05123b743a9518218806ad6f97576d450762866357f06afb7fc","ssdeep":"","tlshash":"8aa002c560fc0c15e5b94e556aa59ba92205cf5afa14400e0e54953c9cd47177a008d1","size":66,"data":"","first_seen":"2026-03-22T22:22:26.726822Z","last_seen":"2026-03-23T02:50:06.227098Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa24679969aa7023f9a9b8d12d073adc","sha1":"6dde2291f2fe97997115c310e0302666a491b489","sha256":"2dbfccf06d38de25095779be27dcd460e06dc814f9fbf6cf9d6deab2c141211a","sha512":"ad78dc5cbe5d2fcd206230a5fac9f20df81450444fda2e48f683497d2719ed22af25979a97e372b5c7bdac29575db6978e37e682b7cc98e814ebde3a00faf55c","ssdeep":"","tlshash":"05a00235dda5551143730128675b179c34451b320e9590dc7b8cc555df6c68368487d6","size":66,"data":"","first_seen":"2026-03-22T22:22:26.727647Z","last_seen":"2026-03-23T02:50:06.229332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/vendor/solana/index.iife.min.js?v=202ererer35","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"811b9ccec4f92097b2e5f3e0663fdb39","sha1":"ad3bfc0e6a16f7f24e818347561303569f7ebe26","sha256":"99f1431018f5c8bf2f6e551f10ff47d9e6e9d980e08c1f296f173ceb80e8cd5f","sha512":"e67c17e9dbfc93c4d54fd5c5e3d774242e0eb5afea85f3d64cbc93c441e7c8aa01e4e716fe199c59c3553b9926c3b5d7f36863c9202a0cc7e448e8faf4fed4b4","ssdeep":"6144:3LP94yMzy3iJBen5+wwf2pIhyQsUfAKu1So7GT0Bo+NbgYzr:37iy3OBen5+wwmIhNu1SoNBVNDr","tlshash":"3e942b4073b160a18fc739e11837244aa739d858701c80a4fddde9f61eaeb8a566ff35","size":443530,"data":"","first_seen":"2024-09-23T15:44:27Z","last_seen":"2026-08-05T10:00:54.158318Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dffdb45584ae56e9472d41ad6c8a26a","sha1":"33d0f4082339e7897d98ba04567d12613a6736d3","sha256":"a19abab1398cef0c4144a369b2791dc5476af667e35e154b7a33b302104ce497","sha512":"908f2afae56da9abbae6f1fb574a64b1f3f37e0c4ad00d84e3c386de219c012a9b307a83a46e6a29d28c6d59b3f92537f7a2b93ccbe42b8a89acf7fa687dbedb","ssdeep":"","tlshash":"2b1100753b2a5534c6c5808b31bee7a93d3260617a02a144c36ccc285d18e8314efcbe","size":902,"data":"","first_seen":"2026-03-22T22:22:26.728539Z","last_seen":"2026-03-22T22:22:26.728539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"815a71b9607d43e14a8236083577e4f3","sha1":"761020f79db7517cd464e009c5a0875b158a1aae","sha256":"ee6f998255789e5eb0afa6b7d9d338d3672f7f897b91fde7e402650aaae3c612","sha512":"50006f53ca08baa0e57c38bb2850f6878fea0fe0dfa60e9d3e713cbe84b68b40237b13750aaff32a055b3795af4a7016684c297c1ea559672375d63cee992947","ssdeep":"","tlshash":"4ed023951975c93161d9018630f5e3dd25602090b751b70481dccc7f7f11ed344f5558","size":217,"data":"","first_seen":"2026-03-22T22:22:26.732459Z","last_seen":"2026-03-22T22:22:26.732459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/telegramBot.js?v=202508241210","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"186a01ca4634748e460652e61e1dcea3","sha1":"bd9634a7d098d389980b25d82f9eb2d4e6f5d3e6","sha256":"9372a1d370f3517baaa0f73462c304a0aa0351713378b88589f1ac01690be649","sha512":"c65a2dfdbdb33b54cdfbc5b22bda9f3b07550a9d038d8f5f28a2b5c7f3fe75831b69446ea74a2af7fd95585c92e39d84da1cbc983512be07a0c64da6d78c2dee","ssdeep":"192:cVBNyerSyb+Ic6Itnl9ZLtjyqrSybfwTQQpItiQUq6A5hPI6yerSyb+wTQr6tDt7:+I9R3QpItYA5eutDtnDQah","tlshash":"5c5263812cb715340a47b27a2a4ff4017235e5975a49ecbef98c83d46f49038e5e3bd8","size":14225,"data":"","first_seen":"2026-03-22T22:22:26.720176Z","last_seen":"2026-03-23T02:50:06.205696Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-22","alert":"Detects file containing Telegram Bot API","trigger":"gemoss.icu/telegramBot.js?v=202508241210","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gemoss.icu/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:01.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sun, 22 Mar 2026 22:22:01 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e0897be5996a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22535,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T22:21:59.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 22:22:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zp5ScFo1Vkkv6Erf5XeYm4hVowUaSswilPW6fADIXnqpd242d4Kg3EXVFhXG6n8roFJNAbl6iVW7erNSAPvWFIOzxyew3f4nV9E%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e0897b1c826dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13244,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926)","md5":"a501b697314e50e6a6cc46c3df850a89","sha1":"97a506e9905547efb660018eeccb01374b5bfb7f","sha256":"9123843232b826b4ff819cf943f0a91c778f6bbf545eee2b597dcba1d08cbf31","sha512":"ae31831646b9a518608a30598c6d0f3013641f22acfe253dcbb9ef46896e712bb93db597c7f676a83b865ba6798aee6f203c40190c83b5c46fe92db2d2e1e6e9","ssdeep":"192:PW641DYDCDB/J/R333r+k/8Jkvg2kSjQ62nx/k:P72DYDCDHRn3rlQ62nx/k","tlshash":"a552753833f40676528351b27674bd2aae94c78bc71b9564b2ac49e12fc3d47ccdb168","first_seen":"2026-03-22T22:22:26.717055Z","last_seen":"2026-03-22T22:22:26.717055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":57,"dns":37,"connect":1,"send":0,"wait":444,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/styles.css","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:00.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3WkuFt828hG4WEQZa13PRsVnM1WvY%2F7IaM5fgsBE792Ibe2XiUXyuzxOx23CtsJlz7giEvarrTdosB9W8cla%2BMp8YYg09uhFPM%3D\"}]}\r\nlast-modified: Sun, 14 Sep 2025 20:04:05 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Mar 2027 22:22:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68c71fb5-1b1a\"\r\ncf-ray: 9e0897b5c859a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6938,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f50f384d1a0880801ca3bf25b3623ca2","sha1":"da3029509403a1893a41746ceccb7b7ef37f5af6","sha256":"d11c7795ec94fc5433bbc666bd079a71bdfa9d10766a4fc9ed9e271c49b50c82","sha512":"b178e148e0cd13393a4aa1e411134a3097a003b844223ef6ee90dd0412a6b241dd958c54a9de8b60c4cc56766df5af73448463e300451eae5fc2ac1c736c6d60","ssdeep":"192:UB0ARFqosXZT9ijoMZPc0Poqtz71M7522:Ya75ann6","tlshash":"e4e1a711ea732992347f932437dbd519333e91038a05ee7cbbc912944f895a5f4727d4","first_seen":"2026-03-22T22:22:26.718118Z","last_seen":"2026-03-23T02:50:06.211135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/app.js?v=202344335","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:00.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /app.js?v=202344335 HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tA1thpvzoUR7lUzQAvaoVlc2LZbx95HnsrroE6PcyNH0JaOdb1K2bFFsqlyG6sKsYlLdJ8PlY5%2FLPQjlc%2FLnCeZX5f3hC2VFuws%3D\"}]}\r\nlast-modified: Sun, 12 Oct 2025 02:10:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Mar 2027 22:22:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68eb0e21-1fe31\"\r\ncf-ray: 9e0897b5c85ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130609,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"07c49dd7402f12fbcc21ea72e85bbce4","sha1":"7c123e385d1771747db7097a4811c78d3e9bc8f0","sha256":"29256be938085efd52a0e0e81764b41629cf318996bf9639ac9dc1e062f21144","sha512":"e7dec6a035a549b2a891eb5f05c5c241a5efee77810946b9f037aa937cd01773b2c01918aa56925cbb878ae354f7438555a6160e213b31683c73fbf9fcfba10d","ssdeep":"1536:btzqdWWUE6y2rmqiFmdj/b9EKue4q9dbW5ydy9cTeyw:bXWUNpr6EH9WqPW5yXiyw","tlshash":"71d3c7a216fb10344623207e6b4f35127331f147660de8e8fadc83505f96a69c9b7bda","first_seen":"2026-03-22T22:22:26.719189Z","last_seen":"2026-03-23T02:50:06.204225Z","times_seen":2,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/telegramBot.js?v=202508241210","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:01.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /telegramBot.js?v=202508241210 HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/app.js?v=202344335\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzVxIfDLtNSQ4JipxLcG1tget3e4LjYj1b4FpecOrhWAeZi6F5JszfrB3e0A83ms3XSM%2F3zcAoOjkS8e9NZPYicaRBWQ1foZ0bI%3D\"}]}\r\nlast-modified: Thu, 09 Oct 2025 19:29:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Mar 2027 22:22:01 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68e80d28-3793\"\r\ncf-ray: 9e0897bb5928a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14227,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"186a01ca4634748e460652e61e1dcea3","sha1":"bd9634a7d098d389980b25d82f9eb2d4e6f5d3e6","sha256":"9372a1d370f3517baaa0f73462c304a0aa0351713378b88589f1ac01690be649","sha512":"c65a2dfdbdb33b54cdfbc5b22bda9f3b07550a9d038d8f5f28a2b5c7f3fe75831b69446ea74a2af7fd95585c92e39d84da1cbc983512be07a0c64da6d78c2dee","ssdeep":"192:cVBNyerSyb+Ic6Itnl9ZLtjyqrSybfwTQQpItiQUq6A5hPI6yerSyb+wTQr6tDt7:+I9R3QpItYA5eutDtnDQah","tlshash":"5c5263812cb715340a47b27a2a4ff4017235e5975a49ecbef98c83d46f49038e5e3bd8","first_seen":"2026-03-22T22:22:26.720176Z","last_seen":"2026-03-23T02:50:06.205696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-22","alert":"Detects file containing Telegram Bot API","trigger":"gemoss.icu/telegramBot.js?v=202508241210","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"gemoss.icu/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:02.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sun, 22 Mar 2026 22:22:02 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e0897bea9a6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22535,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22535), with no line terminators","md5":"163d138ff41c2539fa49a27ac9961df4","sha1":"8f3a7795b425e2cf9360fabc91521dc203b3d011","sha256":"80774a6bb92ee107dd68165e712b5347297304734d43c527376df0538cbdf49d","sha512":"d7750cfeb686f5ae1029c3b356f64347339da0455d60f7b6d0e33d162e462f03a475a90fd14976c7bb512ea425d3c242850ddc531b7bfca366b40c98d4954a92","ssdeep":"384:Ov770lE+qjI5bsQbsYmZsHB9Bt8ygISJtU03FKJms56TKFRmBBGDkvb:Ov77aIUIQwYcsHZGygvJtRsJmY6TKFRw","tlshash":"13a2b9cf7d897528d279a072106f11c962faefc73048a84bc610b8a87d3671d1b65e39","first_seen":"2026-03-22T22:22:26.721208Z","last_seen":"2026-03-22T22:22:26.721208Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.7247107757815339:1774215633:C2G8Jiie8jDgrZJZ8T67YftelGVYa-WjLtjXF9d42fw/9e0897b1c826dfec","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:02.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.7247107757815339:1774215633:C2G8Jiie8jDgrZJZ8T67YftelGVYa-WjLtjXF9d42fw/9e0897b1c826dfec HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12134\r\nOrigin: https://gemoss.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12134,"data":"fJOo1LDTlBI77DGDB50TiykJ05O0Y0noku6olg0Xo-GljGqnQM0bofGLuq0w0xx0gMq30M8l4j0BGlFGUnSOD--nVO0Vee00Bc0fCuXS0wMolHkIYrfXX0wyPvp7shNk0kKp9glkWBOxkK-I80IVfu6inooHxZEdkEkI30yODfB1OOxpLJ56mq56B0gvnZ--3luo0veLJSEOf6UUeIff80zRy018DpmY70Mzr4X20wAC9L6hOei7V+6180zVO0IsgqFQzvYQG0wdrv92yp0o0neo78GX00WvsyWXDvc60UHoxXcuJv5V80pVOGDJvIBKxYpsJQnc0nk3eOYoG80DFzdBDpo9gnhg1hk0wcK0HiTvk0l165g$kxXpk0vXsZOp2RL+z9xz9cvsDppUW9mOujwFmBK5ppNi8mkQGO0o2veAPjo0FgAly4q34JBncYA58xBxx7d4Bt9lqWbWk0TVnO00Sp1b71oyVLzmC6o$cLmVe26VZyeIMSAQKA2VKWm3rC4hSYMR0gpX6KneOYBYzjJo0l7btICpmDwfBQFsNsmwFK2bhG0rnA3V4RZm5$0$hT+NVyE5zXhlzrZAehc1yUzChFUvnndCDsK6PC8JSO+9lWS3v1jirBHr4nXA2cnnsXDmNzggGgCbDNp0PpC6Z-eLxVKWdY4BHhIZwGU32Qrs8+$F1S3HLMcByINZOI6nzE9WNwIp9xgFK1yDMyLoml22g4iK+FQc9HFgZyIN5LRAnLw20Gh+XUqLU6sN5mej7wEu$06MDkey0IjVgLlLS0mI6XIVnsloA2ymDjAZNDofG$LQfJpuOeoMu9gpiFY0J2F2CLd8mByGFig0fX4-8vITbTjlBIsMoi0GMFlfGl6mn6SI3I8XDNgk0XNn8lXTk6xsFn68FoO7ydlBOgX$2OUDoIsyd6L3L1gm05s846GosWnMoXg0+m+eOkF0tM9zulL$x5eOKdPg0mFFhBoOAOnKo3g6Mob1niXfv67ceopjIVBO-lbeOCWbcnEzLpibVSkkJUpHooiSffGYJDxpOxg6fDJBLvInQpMcvWlc51piF6zknZiDpi2RFEntWPbcAHLzLMo5n8KL0Fs45HB8KdsGuAYod6$xi1qESIM5xD$cf0lwfDDz0UmKHlmplHonDqDO$IFvsts88dmByYdMdVnIBfm78-0HHxS0sq6M0O4Gko7D3Q0qYVo102Viw55fWDck6GI6Cs-f4D6j4fM8jqcOIGlvgVyFLWVmvkf1lpR$JjmPwpX0tkO3jLks9tznCQD4kV5w1w30XoBx9BowcCUb0Tk6ed8G0H1ctFok6sRXbBKFO7yvd9rqpszhyBeszLXUZ6Giok+l$WXQHGlX+bBThd88dRg0pR26Pj0ex6om938MoqKPMLJtPnl2R0uWQcGMd0JG5OCg$OI38kplJ-CXIBkO$Ql$ocKgOG5RgeP+QbYUF7V8U10XI-jI0+8iogD3l3i8yheCwtY9$jtf1RjtcK3Gyly51kiEK9os+ciiO052Ti3AUE9NoVELF40+hpt3+MdKZF$3$uES000UZj0GSekDe0YZMoOkKI0DzD0oI-9-SPdVWTKFqnu53wCXDzl6Dw5BB0tDGllkJfSL0cJ06vFUs71CvoRszuM6meWmY00iHoyozp4H90yfyi0dhJIyz6voSlSDcBYjAeKBG1DlI9KSQRdb5JQiyE62QVFFlJdOw2W09TMgqUkjqOoGoJg0LBzObzMooC5iUOPe8EFjDvzQHMMJDPjFzeJ2jc6rd66um3zJyKUBC0cfWtJZcoV$eOdBeJmyLslLjDbAozk3Oy4JDLWkqqRbqqOoyWvDK9P54nH9-OMoYVcqokeWq7oMmeHPIGQhEy1nArMSFIqFOFVeLLDzg0GZj7hqpgRHoG9cyhIimyOkjknBTJpglHkFpG0jI0Rptuhp7VloqLTdxWmX0nIP1Bpch4SDF0gzTCWWz1xTlAg7g5bwtv$1sWe2vEyD0lFpYch7dp-0WF$1mz74B-BYo+p0kLb7eOhDyog1Nc6E8i2vmK60hvk0yQeFmnVpzLK532861y4grxuOebSL9Ww7lTd9H8yocIkpChjFVWIgqsX6jFnDSmnIjx5t4LTSIBUp4ShMMoq6Z5X0ik6b5RIHcAAcF2j6oWbDp0Klx00C1MucQMvv4cc988KXKVsDQYenSSWqfRlqk$mtRJqW6uqloZgK4OA0NVVQevOlpBm2ERZux75VPnyk6IJjOtk3-KbRi9w599g0I65dYnFIIp8ZQ7Jvv04JBympeJgjcoveYFW-k9oPXA0dPT3TfkVoxm5wTT98BM8zuvuc4CxG0-rL1nzLpM5Bv4JHfIVc63FvDASCExW0eCKGXHIQTmJBhSWCfRgeq66e4c7KxnzYet6IpTNSv6g8-fzlV-SvvWv+R56Wc4QpfF6oz58tDL0-Jx6-XoDk0TxogTQrptKVw56S1lF7p7x58DLKNAFtf11DkeLozWKXnT98AkCDvC$VWgo87kG$O3LlmufXRCd5uEY8f2fRhLkzn6eMfrTl$t740gBjNthLg-WocP7eS0YIO1nMudLLIrtuQsB0usQycUIr8+Fo6ov$2O9deKqCwAbOJ3$f4chovvO0OC6sYzwq0BLJm3edylNkwR+UcUKyLOno8W4KnFM-kbkeLD3y8Zh07sm3fHm3HS0dy8joohR7nf4R5qo3034SEMvNZLQn$yO4jPmlRDmODkrb61icqqBtPT2$hkXbyJivEPoXIOewGwpCdj0kvON6unG6dIR$5T3Ol0Q81Y8W6LgQKKCFxk3Sty7zvUXSL3idvVINSIO7JyOBIG6hiqiIDJb75eu46DwjKe8Oy$S7jx6hx9ALHshwt2MzElZkC94vgem8-VwcQ1w8cwTOMkon0TBlwx5rFmPwGMMNNEwFTz0xiHBY4gJrxdlnGH2RY6Op00LBIvNM$oiDmGT3coypsQnyFQrinnhREi2yT$eFcmOQ1lDuAGk8xHyh-Tze4708BiDXgGHowZvSAeU1MAx4oISojKt3UIZSeVhAifsPdjVho+$8ikBNf66R0JzG1DkSdg1gTpky+GErQzbYBV9HoG26R9UzDGJXP9uVpcnovHlV9BKHrlGYZRynORsx7j9mWVQffUdlklVivHSH+cuCgEhLuxlmc0yMKO1ei1nMqRdQONRcdoMeKo9cPInmi4b-Tq8TmvU-sBc4YMFSxmI05DEzZ5VugS02Qc-Vl44WQcl5Axc+2FtoVSMPhOpWO0T7encZpfy39-dDWkvX88nF3nvfVVSMJMA3ZdQUG2uV$tqziu7fumYdDX0I$wVVTf6rN2UKwhm+tqpFw8MjXR32EN--clGjyW0VChuX7c9V5xrj1KWlvd$U0hQ$iyYX9OXVLf4DhYkBIV94KdIg$0koccJ9yFQEjmLkkn7NuAtdn45CtfO7tdWtlkN4ZApNGHED54Iflx6lsfHN1IQ71454GlseZK8B$fhtRjYfvy2t-2sCRLH2c2jfpCf46Od-OD6plDpqnkjqFjvt5fvLWe3w3IFAFF6QcyiNRDD70EMefCiLfDmxmCnpBlfwWnJN5DCev2-lDN5D3O+tvlPOGj0x0c-tleJl8pSjg4A4R4LIeAeK826wLjOL$7ug$77k6frnkHJplpHdSDWCKyLoy-8DSknp8QwApAFxo6OV1D0zUC6E0627yKf2-Cyz5D7NB1x-vtyMPwQ2A4xFVlLpUCOjpIIAkynprfHozDzxswhfHClkBx8lx0uNENV1ExdjwdYC2ecodAeFZ7G4SkLf1t-lHxcx-q$2JXb4H7oclFGz6Ttk60yElO2yctgnk6A4HCcXPtBQhqsDqfVn806lBM7yqM2yXjYpJbJXYAJm0g8CekyND2edmncm1NGbupjw3HXCnI8N9F3eNjBW+ICq$l$f8e+xUxg2+t7jR7NlJ2lNBf-FMC-KvflB81nNVnxKHAkoK-mdTQwt5By0SNobxA6wxFU7sljo$K7z5OvFlvF7gFW-8NG0+x20AeC7nNl-rlfou77lGHkqlqoQ-xxkH4RW328xlpiouCwycko13Q+yG0lVftvg6pJGnBnlfLHC-4SeTk80yHdDPLHCK2s-vDVBTrKy3AlBTGcKW4t0eTNqc2tnOe0bsw0V11SxvOemec6D6wEw3ESNlBcXOneklF8AiqOD8x8NSeiFe6i-qzyOle1kn2MLewAn8k8D3g5y8qloedj12k6VYezFpND2tx8ft7sef2e2lbRWkxekkO0WlkHd8CjIx06DILGBfBOg8FTONqgz6H5TWx6wuql1UDVDWycF873n6H2L3hfB9MmbfFgzB6lK46KbDC5n8H6H4bbdRKO6eXjNWeXylnnObj3lb7lpH4SBI0gz0-AeyHEgYQjoJMBd-KmQpDwTufHLKx8lALRt5woAlwN2gX7CknVtExppYG4LL6LGcn31xnn-Qvltsdyz2tkv7tvtdxUK4QUdXqOL3C3ef4L4OgYQeGDXoWllBz0GLwiyGpLM6yl06f+Cg2cBoE6EFoDzqbAL0GDVmg8DjlsB56DG+7+NXvn15X$wTFzzINzMt1zbIojQhlVOGwQ2eqbnGkswhf228KGbcvrHbffgjMDrWNDV7r7F2AEk9LSA7E5Hpr618kG0hz7oRE-lIFfkSglzOrClPw-2iwpH5m267fWwOEipO6rfWfwcmL0nef61Seuc0VKL8B+ApcIjcdBW6HwXLQc7EK$2dfBFEtWOt-MToW5h4vyoLDAkp7TMvofw4vB26z7o46uLDqLIMI8OufAxvOdC5B3l7gGnWLuym49q+ykfOVYrIFukMcPkltn2YjSytnQKizuNGNu-+Au6TocHXAoHHC0j2El0-Nlmy4G0TVJblDE1x1gFGvqouCuX4ChQgozlm0kn8OsKyeoQ4d1efyfvYxel7wA1FCnOBWkycp6eFmIyjTgtCDkp-k9trIgm1jxylmrCofxhvfj7mEEH3Ocfk7x06p5v4KfNq-cB8DsTxBi6mKnlioqIszlz5IE4Kvnz7Npc76DGc4YTDjxXRrsVVlFnkkLEMbWl-7$DxEVWkmN-i4SXC-7KzKmA5TNOO-i7nzZmbMlDClBhw0EqGIIMexBpuAnrqqidemnf5QcoKlceKqsM04Hwc7VhpTRbukiGXKdl3owKngI6n1qfuDO-nBPKY7$q6lE2dnuM$KNMkc$MJV4ECX6olgBAU4wGeMbbWpedLFCgsTXMeFnX7XrNHyboyOGBjMVcBQ-y0bpC6gOnB07gPGcpXpNbPQhlMqZjhwmvWp-OhQD6uycwq6sVchde8fBz77Qr7ou4BlD4Dq6BOQzWt4gzBbGpBc$q97UD3nfV8ysI$wQ6NXM79CLqRr6W5hft5NU0nCqGcD47DxQFGTdV1NdMerLEDbxqixkInW6esLT1C2gb11FmhzZFOL-wlT$h$X3lxzgxUHeA+oGHey$Q5KvcskVkkX67NBKXWxWjtO1F4THtnVckPDCyMpfA$6qD9n9pRElzl4L-0V6ngCWePOGHEIkz2o-7qGGh9G0VSBrb3Ocz9Mz7LTXGeQioLk9zNCgo+brNpqitWomCNzgclCWzdB71U-PmbV6is0K0AhXbH2lhyn6qnfuveDAn7olHx0UnQA307xxg+2-eTvQtczUIUd5bLXVw$bOzGfL2OJrI6kyTiciCwW6II6eKvkeNCeLbx-IoDzANlmlM-f5f5H3B2FCDWoUEdfoxIgy0kJCAryDblDmVl0uCKFP6yplKPg57TmDLm1kdgpy5Em0lHGsnUCOsOwAgS-3CG6qeT1Dqb2JGJ33gLBeNrTlvJ2-gYz36Bkwz0SdXCX6yctAVVhgWVGVGSTST7KWTckGlGO2FMvS4gmOU0N6QvhfvPL+2YyZFAFYxYA4MzQIqpvIjAD-efyd7d7G4vCKqIGZ7TE4bQhvgB3GeG0MWKvSdxk8Hl6sGcdm-N6DQvltn6DbDBwJM-hdDCDGr0olFGWArOJzGc0porKjFYbqzSDWFUvQKyXs0GEGgWBYE6M6k8clf4o67yD1O-OnMx-uLJsgM9cWvMCjfsB3$MNJBIoDGOQRgE6nf8kG616l7UWkA+dXTX6xrGMdOnBxnney5eO7hpmndSD7hxtoiOiT9yITsBYwMdTODHbGHuWDXSGVT1hNwNHDQuvQxUVUXVlL9fC56mosGddgOl+v4G-0s6BtGAkhWhhhcsbvMRUWbDdR8sc9269rEuhj7AfHB59jFOoUCikGefq9LWrXK-xKZTdK91TXK2MW6ItMvhN5efjKtBy7KOlB3xcsDxljCzWcPAdS1iLh20EKmS6WC6TNg3D3e8mOucIsk9MC7hhAWkKcY5BnMr4urUXghccWbOZWhShhrQz5eXKveKbs7ZL5TBRY74x7JpMIAzVm0CyTqYXgbpc0+dWzP86UCTm+QW7v4-DVg+chNbeOlGPGp$GozVhODknCouqKV6lUAuzCNlwYxVCil8DCdsf6usl3piVFyllrvtcLwy$4s3n34HWmmWWm3CQcR8lJIYVz83qBnkfuOLeIEYtJkCzg8m4Jvk5uEEoG1TioSos$HoUElpjRNiy4b1xGk7fG-PXW488mAAG8$j5ht5R22SG4ZNg1WDYWMWewc$Me71TOO4vVC2Olq4qytu17zftU61VuW6l3Kz5yve0CtuILThtTxEGKUTJDhzmOWuzEqYA4JjJ2jYFGDW4Lq6DOKUO7kG+8GRKh69E3TXjRLOs7A2sH1ZG4QY1F25fnxhGLBTcRUGR8oQPQPFitBvQcxBi3h$frvJ55ux6Mheje4qYy8746VD9GsMyArhb1Vdx7y2CSEg5+MXQPx67le-oy1tv58qkRx94d1qnQVbKv-2c2KlSBRfX9pqPcnGliSmX6CKcPOQm+qFzfKwH9UDGV7VKeStcs9FEebQrRNNVBABAzC4RBSmIgmy1tKMYnTxfHxB5ltRYmNnI2rgLVlTISpluXQAr3kqqW6HTeFnV2y26D6nc2Jl$PqwtYtq9oW30W0q-3qMepbOZpQQ4YzG-8PrBdtupNghRkVjHvWe46Gl8sMrXkOO9nIJ9M4OkHdQ94Uqrq1QUEEl7$1KA95fq3LFQcSGrbiy43gQ+d+cLgMybcqWQuFOf6Ydbe2mPLesSsiUeVZMsVUQRlYLfhs3B8CWzyepcLkup2p1uWxAXf8q-bzy-yvuF9mDbGUtKwlWcN5VKQ6n7L2k8zNyWlO2yWxs0FNNDeJepNkkyL0-EHjsQYkoBuivWLYbXqefAYr1kKGyeKzSt1AE0K0kgy-V-u1tTs3zu2PPN23nnvGyoM5TdjK$i6pJTwdi-OJy$xBy3lkQJxX31iqwXQ5OFj2QTYhYhj79sW4YE2Kv1l4vw5ikPjFkRgYBK5u-OB7BKjxFTIivI6MeW5TVXU$U+rR0gdcBlKius+duP5jXQwdnYG6KpJM-ZgA9zoT7Gc15tSJRJtMSTVh46pyCPlAficCMZ7YyO5hOmvWkyCXuI6reXklA$3OzFc6GJwMrZ64BX0McmrzDJghBGJ7kH90rilw8cBCpT6B66nJyl0LfyGn9DeTtGZ-fstlWb18x9TvL6YgG01MFGjj6Ll8nbzJ665y4JWz1f5SzV5ILe5RIDxTgh27NLc1Nhtx-sIs$0Uon0wkxvIY0e29BimWjw-xwu$0ByZt19gGIYlksnYV11FyUx8D$0so+9B0nTz7DvpuDj8B6pPliKysyBlo9SdIDhKskvD3ch6rqDgm96GRLo1T7bd5gdsxkiolX12I7FJ0mgJNf6r7kNLWDymRDc$4l0RdPpF0AcmLyGkFyco8FmhlO6ylLg6iT6+6zOh1sn8pl5k8cgOMwILkLuwyTBlq1rld8wG86s6UbLqeenoxsOS0oLyw4O2xIKF05bxDWqhnqGUyr6DyQllhHyly5z0dYIowosooRGFuvyr7Ic0i080G83yhfdhgt6IZqJTybjq4p8qR7T843NBnkDScM98GTymo50FyBge9856I25dXwqNlj82yhTw3dAIR3K6UOQq1h6plTF8GlRHuVeHcqe61kcEkJxYIEIAGt8bJr7kGdlDyQvwlqn5FRFn6-yO6UGkVDYV6LIl66R6XmHFHfbUyDFDKNVYTLyduB9OSy6GcxRJLklLOS9-5g49-2mysOFkXLBZLGuEFLcWzgOlJCV0e6G8MFnbieHoonGX6LeeDcVds686dOPnfBqng$0jqS7lNkkHX27LjodZX4nefxRIMp8kyPdDTnBSO3OXko+d7SiQmoLQGG0UGzsxSSY6KG45gf2wIXnM6RRYRhqbWd8k3sLRozcOrqgNH4Te6OOoALTOqIF7e6Lo4gn9e7k6Lq5MyNyDhwIIM6AFyG3Bm9p9Xrb$qh6y3x6DzD7JuDL8ZRfOV0l2d6s58dBVMns8uLy4M6tBrSD1KndnZGOEn1jnZLVFj0iGYkbB0TnKkl0qOv6HslKHNl3cijOJb5-hk2IhZQ0GCFgB7GGNo8gclHAFdgkodwLCG$bgeO7DcydRYNvqrzeJIiLMscO-5MYxdOT6zs4JRTfBghL$dzsnOIT1GmgVP6LF+7TtkzfYI28WRlOBGW7SlMJDTs$qbL1c-UXZ6ygX6JdOYdnHe0K0C0p91O5TdZ786okJlv8kFKuc-o-LmTwAkkuVlw57kUJzyl6MD7W0zJy3bBq8Av886PcWexAkYeTy58OO-3gOI8I30S01GNH72RBFRb8FMo1-wxFXLV8Tq7gpLgkg7lyJ07rk59BdDb696fR8oELron5LD0spO06JdxmBVxOMpztWjpSifJY8FqLOvo4c8GC72izM1gcWOIMujJS0r8H5Aol-9Hq9GDEwyBjsCe$fJy1kYWBfFD$40U3-8v6Hed2d453zEo0SkMqDLjM$OWyA0x6f6eoF3enlnLElW7H26lz6omy1X1B0002EyDR0Jgw02Qf9Oi-8DNgi2pkPNz0oySkI3OvjDxw4-Tq1dRIToILzsHJfUDqu+pXR-6VToXlylPDBMfPojBh45k7zdDQWp847H$DPYIr-nA7HeliBo6Bo-6M2lU8K03mEoFkI-8NG4IbozQvo-i1yxzip8kcA7mBeVmJbo8vil1APR9Hc0VRHyZRFmDMoX0sX3Oejg4wIDNVUY0kL8eNO2lqysXH4IRgewQ0LiiyX+lq0S0O038sXbGRMwP-i67P4k$59RoRR9n0ok6siz76jLiuoF+OjyRKhPwOsLLO6cOb7MwkTdgOqwgJYkc8H3dPOLMX6tThyIAgtmAOREm4XmDpAOF9MhGgBD2g2eAbuo8c1I2J07IbDcTqQeqWJf8Oc0Ys7HmQglHJDC6X0RyJBgBkvnV0eoHyZ81cRN05DHoC8T2wl4ZAHXi0hGpKKpgCHvs$OS8OhX5HF1gRJj-BDmxPoGyzRF2v7AIFVkyI3Rmyuql6h7i8IYXVOq3QR0MlBFjSvye8ehmks0DQSxsHoMo1nVbA5sOuR2hwm80Tke0V006fPLMU7oA0755Ty$frHV4EI-MALlnf5oJAXRhob3bwbI0Sx+MyuuPEwhykGIDRTuA56bg$1rgF6hsyT2jzU1uKiSD5mcpJdUORIs8EMAT88H25IObRYsQqzjVsHmRvRApqmbR1Liw9XOU3R3FR0lduujR10cT+wXGkfdY0UMqYD6f613CY6duZev6XUe-x-6UMQNzZmbieLrS3uQNcKODxIezs$uhoBQ6qH7obDtRp3NYW+1klOodMS0ODbxHysvXEuwtO3G02iJK8wuJlyQW0j+OUS3u1knlynA7dR0yJr7Z6fZV8vsS3uLTR+DUe3op2CTr7y6W-eoWB0mZ-3jFmInycrDpyZTxFMCdWxq3P7ncr4kbocDt0S7u7t-KOk6MjSonZDveFUBy4+yYn9pgFzO7NF0nwnKZMYgOK2SiLUMTB56kPk5e51owvgDk-Ot6vLy+RGLt0b+1BcYLYGXLdjr2gHdA27n9ydzIHBMFJeAnio0DT6tTzQszJdLRJfTAdFj1+neTFFbSglWOetn8mqDT-1lz4GZuNluwo743cYp53S3tRkqjlc2eXzZT7Gp1wxnI0rn5lSyHqjx4rlW0HT0wEgeJFjJ7ntTe26GIWq70r7q4X6qOKhv1qdqx7TQT4UtX6BWn++EwbXRwX6Bgx4LyK4SkPLARfBtmL4DGt6vJnYhPmPjEMgnAJk-cSmZR0lpQr6GvxlRPMX5C4cbSvxS7OMQ6XWxCSC0nm+wz6neIz0tO-qEwvWDwmby9JIl2uhKADXUS3uOOooOcKpsS8Cgk6-uVxWvK5e6vycmuzvA7FcDGolBdjEMIFWG16y1GsEqLKj40RhDMl4yH28jHYX2ooQl4f1quRT1HpNl3nkmCFDNdX0DeYYVlmp8ATUMG3D1OAU7L6MNydeu+KHHVFY6Zojc6zENBBo31EFQeZRq-xQoYe86GTuuXP-ko+DjOn8RvrUnjWgp3wHqmkEeNZHTXQOLOV+jLHgg71WFIqezQd6xz$DEMsKyGpltnx4COuULxhhhC3vsekgvKLqD4weGPVP72Ks4638fmjLeD8G0OHFLDmvdtnR-Gfr7DeWyi8iT7Kz6COBIFC$Ox0IYGhjP4jCiu+7RTO42yDDS7uhhPubBgUqiSIvBTswz421WexquN018gzK91lKjOjhSfEzC3FiKQv7KxYkAd1zxRRinTYNbYCiWgS9uIh8ihU-ECICD5yRsNmwjLv2KXi3m4bGwoLvdKBoFRsvM-frLCKMunBDivGkW4TpGXuR+xGKNpX-SIvFh+NhVlEsRpPir0pnpJ7fWASendh9ZQj2NvE1Iv135wOfUEc-Sv0r3qPGKCiyCKrvJljPGKt0WVCgiJljbMD2ozDeGfUuDDzDtovILqfKlxPm778v2KTnlK4iEoNfmgCmidhqFMO7vWqeXJUIXNb6N$zchugu9AK1OcrW7e5i$lLbGhKJvfbQnYu0XWjmgkYCsnF9td6c0qzdCnv5LAhysCqWchYfLLRxTs2cWAKZ7LdbjGKK5c91XsLK+Xrn4Uv76pBpg8VVhe0YgTCn9TKVm2yV6mc9i7musVcK8UQ16fjg$szoyOUQ1GnXg$sGFyTUFecfA45SDDjTUD1yfFKspvMj7DMevsU9+Rln2PX3d8NmgJ2XhCeWrCTxlzLyl97rWN1Muf4P1c7jtcMheGzRthGKCRi7sIf5RJMvjKRYgCVxORuVVhjK5cspxhhZCmvK9WACdxZRP1es7vWNrLN4Ri2VYfYcc0ixtzS2csIhi$14NuRNfzxNQg7vC0AJtvEOIJFVIrsmYUVnR-s6leKTE4Xoe6CDDzDjqwYUAlpNY0rFAoPOLqgY2BO6058x6XJlcCdvZv$sjYhGnFVYI-XZ0X+zPNK-ucdmlJZDw$7k15HY6bYC5x1Eg2ZY8LGi66X$TLfq5OmZYtePxz4g301pF0q000-6G9OoH6GeHQwJL-0CM$$e5wmI+IOOiOYLXJnyAcF2ox5noErO3I25gODOhGhmN4y00ke8v0Dz0plOpHoQ8-RDOIApzF6j1FXK-XHgnCLc6S8gOz2kKqYOP8kjj7r1N8I2Fbo4obA6002oog000pV3$pbW0fy4iVVDYD409k0U6J10lqyXbW6BWXdCv5h$fbMj9oTOHMUJFYb2JbW60guYbMjsD1$2z0D$Yb47g0fh06IK$bb$w+Pgdly0G9q04oc3OA7VU79Mk580Rl70sU6D8P9joUbZmODI8yqhGg-h8HOx9DUN066SINVV0g000NImnmkm940Xo6nWjDCUBD9P+6r0pMlr50C1yvypfW60GIf$Y0kkWGO6cA0HmgDzoZcnhIXmUu-QMLBEWMHEkDX+chGMcIgnCi5XBOgTYyFCkfnxIp936l9MH-AeQp9yPTfBgYysUQ0YoX7MEVuSX06kC6wwtRBOHsiKRsPvi0JDGlNIWDHP6kSFnhk5IzFJPm0Q-cp0CI79q0m0m010ToDl6$6dBUI-vkTFcL58JeQAQfOtncLsPGpk3qm1O4s0$6S8WKOGgGlygYPj0GRV8HHsYFhIHKLKk6b8DYopFhKAhgd-Gn2o00sn-j8pd9SNp$z4ldtY$y97brZtHQ3Dy0G9$6eBB6IJFj00DEp6500"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: dUjTzCP4x5xe1b1QGQ4Bpg==$mQ/SNzAUF6NNCq6OjKnu2A==\r\nset-cookie: cf_clearance=1abF22Lc6ObA4vdLQJwLgPUQoyXbeknu.BL1VJn0An0-1774218122-1.2.1.1-EibLNFnrjE4qJUzL1tX5bly6WXLhcGR9q2.fgxa7Vp.BMyBKsRK9SstTdXe9h4spPR8q01ANaeC5_R8MChfnDk.snJ7RaJYWtl_jfyU1pmI84MhTqc9PyBOCuRd9Wq593PVUh5IvqefED1P1KyDvVMi6vlJahM0uayjpgZGodG_sSFGt4JjTxAODFM8WmgTHPzJmxRPEKQgvDexVRIU9a0oSEqbmAkspz6tfaRxyP4w; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=gemoss.icu; Expires=Mon, 22 Mar 2027 22:22:02 GMT\r\ntiming-allow-origin: https://gemoss.icu\r\ndate: Sun, 22 Mar 2026 22:22:02 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e0897bf89d4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T12:03:16.307422Z","times_seen":17724130,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/poll_action.php?any=1\u0026worker_utm=","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:16.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /poll_action.php?any=1\u0026worker_utm= HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gemoss.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=1abF22Lc6ObA4vdLQJwLgPUQoyXbeknu.BL1VJn0An0-1774218122-1.2.1.1-EibLNFnrjE4qJUzL1tX5bly6WXLhcGR9q2.fgxa7Vp.BMyBKsRK9SstTdXe9h4spPR8q01ANaeC5_R8MChfnDk.snJ7RaJYWtl_jfyU1pmI84MhTqc9PyBOCuRd9Wq593PVUh5IvqefED1P1KyDvVMi6vlJahM0uayjpgZGodG_sSFGt4JjTxAODFM8WmgTHPzJmxRPEKQgvDexVRIU9a0oSEqbmAkspz6tfaRxyP4w\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:17 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1%2Fj7YNFBCI6%2FrefQHOyY374gyma3si7cISERKLWoZRHxCyzdBFdC2nvfThifZ1otFfVY8eCekRFACLvcrZxm0DluQTzOdQmU50%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e08981c1a25a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bf082ec0340c4e395a4a34ad44d3d51d","sha1":"d8eb610c1642def770c859d2b2a7debc529858d5","sha256":"e8c3f5ae177982447f24e57803dac848ec7f468a76daa37342d7c969233cff24","sha512":"f948b26b52ac72ae7b98d5761a92223be61ea5b9b1f7f376ae665e833232e814b3befe13740a874d6c310b367cb3e65f5ac9bb750e44101e408ee65ceb4da66d","ssdeep":"","tlshash":"45600000f0c03030030303000003c000033c0033003c0c300c000f0c0ff00f00033000","first_seen":"2025-05-29T06:52:10.36325Z","last_seen":"2026-07-30T13:59:47.890275Z","times_seen":11,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tailwindcss@2.2.19/dist/tailwind.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:00.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/tailwindcss@2.2.19/dist/tailwind.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.2.19\r\nx-jsd-version-type: version\r\netag: W/\"2cc503-cyTPK4s7rX9aC3Y3NNaHIxjV1fQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 22 Mar 2026 22:22:00 GMT\r\nage: 2487384\r\nx-served-by: cache-fra-etou8220049-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 255702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2934019,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fd1515a3d70a9d3d1efe23553fb559ab","sha1":"56977de783ee69a0dbd14635c5a34fa3946b2252","sha256":"9209ca41f0f277ebe6b6e87354dc667081a638b83945f4531807bf06046227c7","sha512":"d3f9747c4e662b5dc6bf2e4e88b68425f82c89cc01c4a088574bcae8fa6c9896052b26355c2a1d93f4b6e8a5a4e589378f004c8d33299a0a53e0e5e63731c78b","ssdeep":"24576:TNmEvSBlsi1KhVzbweQgx+oaiM8eMkEcnxnF/DlZKmTKvxg4hahhDAeYYL24qC0s:TNmEvSBlsi1KhV6xnF/DlZKmTKvxg4hc","tlshash":"31255f3cabb1253baca7a1e9e145fdacd50762d8ed3005e7bc9221019be13f7c947264","first_seen":"2025-07-26T19:06:20.805876Z","last_seen":"2026-08-05T07:00:46.139462Z","times_seen":4491,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":61,"dns":1,"connect":26,"send":0,"wait":27,"receive":85,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/warning-4.svg","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:00.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /warning-4.svg HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:01 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QDWDZ6dS0lzniO91FwxCFPqApYvAunFTGv%2B50N%2BJikRioy14kDa2Zs8ITruj2G%2BEuWJqQ8GmIvH7JbCjMaTeRK%2Fz6Ixs%2FCRL1U%3D\"}]}\r\nlast-modified: Thu, 11 Sep 2025 17:08:01 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Mar 2027 22:22:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68c301f1-fa\"\r\ncf-ray: 9e0897b5c85aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ba91a98bcc0e81a6ebc508797e28fb6","sha1":"9e4b8ba9385cb3e97eba4ac0e6ad3cbcdfc549d4","sha256":"125e8a6daa26505f8d61a24c257f3be852acfdab63cc5b3756c23ac2e53d6225","sha512":"6a8d891338dad1f086934ab387216146658ba41ad4af97af8d11aa81e62ac7c7b869109d073c0e8a21a583215c669ac5bef6b0aebed28f383093ab3187e2538c","ssdeep":"","tlshash":"04d02e80c02cbb04dfa585bc8ca870d1000b249a225c44b8a0812428b250aef2887c41","first_seen":"2026-03-22T22:22:26.723867Z","last_seen":"2026-03-23T02:50:06.199527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/vendor/solana/index.iife.min.js?v=202ererer35","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:00.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /vendor/solana/index.iife.min.js?v=202ererer35 HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0BaMkzh0PR13wvt2FIt6wLTJUARBukdezDzuVbeh%2Bte%2FTjVvJwc4ObrbOBhA%2Bu39l9RAHIFhGb%2FAvuZnCZq3egeP6HkpVWHIxc%3D\"}]}\r\nlast-modified: Thu, 11 Sep 2025 17:09:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Mar 2027 22:22:00 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68c30235-6c48a\"\r\ncf-ray: 9e0897b5c85ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40432)","md5":"811b9ccec4f92097b2e5f3e0663fdb39","sha1":"ad3bfc0e6a16f7f24e818347561303569f7ebe26","sha256":"99f1431018f5c8bf2f6e551f10ff47d9e6e9d980e08c1f296f173ceb80e8cd5f","sha512":"e67c17e9dbfc93c4d54fd5c5e3d774242e0eb5afea85f3d64cbc93c441e7c8aa01e4e716fe199c59c3553b9926c3b5d7f36863c9202a0cc7e448e8faf4fed4b4","ssdeep":"6144:3LP94yMzy3iJBen5+wwf2pIhyQsUfAKu1So7GT0Bo+NbgYzr:37iy3OBen5+wwmIhNu1SoNBVNDr","tlshash":"3e942b4073b160a18fc739e11837244aa739d858701c80a4fddde9f61eaeb8a566ff35","first_seen":"2024-09-23T15:44:27Z","last_seen":"2026-08-05T10:00:54.158318Z","times_seen":52,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":530,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gemoss.icu/favicon.ico","fqdn":"gemoss.icu","domain":"gemoss.icu","tld":"icu"},"ip":{"addr":"172.67.207.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gemoss.icu/","date":"2026-03-22T22:22:01.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gemoss.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 07:44:13 GMT","end":"Mon, 08 Jun 2026 08:41:56 GMT"},"fingerprint":{"sha1":"98:5E:84:F9:34:A0:C7:3D:9D:16:14:84:E5:BA:73:89:FC:11:14:D1","sha256":"0A:3D:50:CF:B9:DE:D5:FC:E2:15:2F:2E:6C:98:0E:E4:93:9D:2A:0A:8A:6B:D3:1D:A2:1F:7C:D0:99:93:CB:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gemoss.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gemoss.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 22:22:02 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgKhu4l8eJLX5JIOBy0rp3Br5ZrB4tenDyN2ApqYi2eyNnudAEB0FnjowzbxZsrDk7yWSTpHVVyTDNgIMQPamKw%2FfxKQsf0cSlQ%3D\"}]}\r\nlast-modified: Thu, 11 Sep 2025 17:08:10 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 22 Mar 2027 22:22:02 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"68c301fa-2e93e\"\r\ncf-ray: 9e0897be4993a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190782,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"bd1f98dc8ddb10497ae20c6636bcc8c2","sha1":"9917e32841e60291e25035de33831cc7f71f851f","sha256":"c974663ab33729faae073c719b515de1751fbec1d6f54f76ce8849dbd714d914","sha512":"17aa6a8dc13367815e3d3758e02451a6bec3615913a8da167a4be1bf701753e0279810bfe35b127787149536a977f981c804b73e6dd59ded57c7ba7fd5c4b629","ssdeep":"3072:MBwAg1dBYl6grHgBv/NJir9HNWW3U1GKJLTB5sHc43Z5uH1s3:M+Ag1dBYl6grHgBvlJir9HNWW3U1G4TY","tlshash":"1d14a2a8463e09dbdad209380e79323e17454df6f8a3d6dd1a5a76210b733db5c801af","first_seen":"2024-11-25T15:32:22.139833Z","last_seen":"2026-03-23T02:50:06.207164Z","times_seen":8,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
