{"report_id":"1d568270-6e68-4cd8-8031-c06213b3251a","version":6,"status":"done","tags":["sinkhole","suspicious","cloudflare"],"date":"2025-04-03T23:49:00Z","url":{"schema":"http","addr":"fdd.xu985795385.workers.dev/","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"title":"Suspected phishing site | Cloudflare"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T23:49:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fdd.xu985795385.workers.dev","ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2025-04-03T23:49:00.980424Z","last_seen":"2025-04-03T23:49:00.980424Z","alert_count":1,"request_count":4,"received_data":36169,"sent_data":1952,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-04-03T23:48:37Z","timestamp":1743724117,"ip_dst":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.48","port":54326,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-04-03T23:48:37.793305+0000\",\"flow_id\":100101164229579,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.48\",\"src_port\":54326,\"dest_ip\":\"172.67.145.32\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"fdd.xu985795385.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":929,\"bytes_toclient\":3554,\"start\":\"2025-04-03T23:48:37.779211+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Sinkholed / Blocked","verdict":"suspicious","severity":"medium","comment":"Asset commenly seen with Sinkholed websites","tags":["sinkhole","suspicious","cloudflare"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab1ac4cf0f484cc9f859c0a7983353e0","sha1":"2da142b1135bd10cdbed4a7353e4483acc30ebe9","sha256":"50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324","sha512":"9e2901fe2c4505797cbc7d3853280cb3450188bd0cba66ffe5c8055687578c849b31a74c6b56881bb07c195217e9604a88ba6995a4275419ca076424ebe88b0a","ssdeep":"","tlshash":"73d0a72677ee14a8129bb031154e2705212180024002870d7a1c92359fe0e2708259e3","size":210,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-06-10T08:33:06.08829Z","times_seen":382462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"56df91490fa1984fa82b297dcb23c22d","sha1":"2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9","sha256":"275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24","sha512":"537ac565ea049803015a3b15881913d8179eafc11f95ac99dfe0ee842ac3d496ea3c6e1c167274357b7443e32ea9efab72400b95798479c5a5c81c9aabc88e8b","ssdeep":"","tlshash":"bbe0dfbbbb192e3906efa67771aee74a3676c091acc05560092ccc940b3fec4d03a1d4","size":375,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-06-11T01:57:59.333649Z","times_seen":453419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb2ee6e4b3d4e81bacdb2474d9b3c2f5","sha1":"6588855b25c975b224e0fd1b50ca1b3f36cd46ed","sha256":"3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05","sha512":"218d6f484d2b8bf503269bbe4cf5dd5dbde2b6d096e2ba635eb4e947a046dee06bfc43b013587b64974372520acd6e066a3fdd563055546b5e467fc38c6c8a03","ssdeep":"","tlshash":"e08004534030730005710307135555403335501030314c0473c141153d51d57c305340","size":38,"data":"","first_seen":"2023-03-07T01:03:09Z","last_seen":"2026-06-07T06:44:39.253612Z","times_seen":160741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-04-03T23:48:37.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xu985795385.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Feb 2025 08:35:28 GMT","end":"Tue, 27 May 2025 09:33:57 GMT"},"fingerprint":{"sha1":"5A:FA:90:8E:0A:7F:93:C1:77:FB:A5:2E:C1:C2:BA:F6:F6:F7:E0:1D","sha256":"B6:1C:A5:6C:5A:16:6E:88:F9:7F:C7:16:C3:2F:60:01:E1:1C:9B:74:6F:AC:4E:1E:FC:12:ED:9F:EB:A0:D4:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fdd.xu985795385.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":18,"data":"time=1743724109959"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 03 Apr 2025 23:48:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 92ac75385d2a0b4d-OSL\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Fs8Yw%2BpDPUMtciqJJMyfxKXlMRsk9a2WGFR9MaR%2FRtp0W6KfMj6KyuyvwY%2FLL%2Bq%2FomtpGDPG4ADFjIK7GANE7e%2Bir63VmyNRscvN7ZI1VMcXCXC6VrNlB51RbhLwoAUAa18EbMIscQGCxxnin2Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=610\u0026min_rtt=570\u0026rtt_var=132\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3309\u0026recv_bytes=1275\u0026delivery_rate=6426035\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=bd1d2f2e6c40aebf\u0026ts=46\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4729,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4966), with no line terminators","md5":"ccd781f67015de2e2628a649a8fdacec","sha1":"ba04fb40119290d78a17ca989be809af02bad8f7","sha256":"7f1b91805d0b5ed42b8161bb12af77052299bd96bad0844b334cda1642117871","sha512":"5ce860def98059cb669ff92ed35a827d308eff923534222b59225bd048658ebaf38f7e676c07859e81e3360a8d71239b75f26f0a2ce92c2b2b94988709ded9e3","ssdeep":"48:Tg/Lzken1nXDJDUOOYNn4Pu577D01Rf6aLH8eVpREwCwDi2Nl5RjiHRLGeoPv+LG:UE0XDJDUdCeHJREfwDhT5R0RrT9Ffy","tlshash":"09a1402b78ec107b105355a237bd672e3a29f454dea6009136acc17d1b5aea4eea72c0","first_seen":"2025-04-03T23:49:02.772516Z","last_seen":"2025-04-03T23:49:02.772516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":36,"dns":3,"connect":1,"send":0,"wait":21,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/cdn-cgi/styles/cf.errors.css","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fdd.xu985795385.workers.dev/","date":"2025-04-03T23:48:38.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xu985795385.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Feb 2025 08:35:28 GMT","end":"Tue, 27 May 2025 09:33:57 GMT"},"fingerprint":{"sha1":"5A:FA:90:8E:0A:7F:93:C1:77:FB:A5:2E:C1:C2:BA:F6:F6:F7:E0:1D","sha256":"B6:1C:A5:6C:5A:16:6E:88:F9:7F:C7:16:C3:2F:60:01:E1:1C:9B:74:6F:AC:4E:1E:FC:12:ED:9F:EB:A0:D4:77"}}},"request":{"raw":"GET /cdn-cgi/styles/cf.errors.css HTTP/1.1\r\nHost: fdd.xu985795385.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdd.xu985795385.workers.dev/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":12113,"data":"QZrhvgSLvKrvN3HSySPE2hgIEenEdfdppgLSoJE8BIuBDrEq8wlHBKSWENyrYiZZEe9pEbEpIprSEXpSOHzh9KZC5xh8BsZne7WP3YGhOpEmSv0lhMsRESlXThwc7v-ntS7TSGYhgwEqWj8EHRCdgZhu5FSrlUC9WITE206ESUn0hWD0sZhdESBW$-yE0FLeEE0JEskUgEEC+hE93gT3EhEGW6LgbMZ0pnTE8$6KYhwQSstmAnT3Eg66DUrKEvgJHMr3RQPIWbDLTSfQhvFSorErWHjXX1d0Tg$aBxYtMDSx9malhxYtutS0yaSPO0IiLubzMTEgNc6SDhSSeTypmaESgzPSRTCMoTqoCvfXDoXUBauIXhISZ2wSTEZRgpESOcejH8g8tWdUBhEiP2f0ub6JnIfgrQDJTtb2nQPC9Bbs2XYfaJTEN-D9HNR0s$Ade6EE0fwClxQjYgW0CNlhZ+bmNPOFhSin$bI77MooEYmXXMSWLtq3u+j97dhi9U$g-KUFpEbAOEI08fbZFl8Cl5SM6ZFEkUTZJBhgL50pJvKQhEWir8Q1wG2Wn2FNBrvER1c8PNoblGAA1NoOqywj08w+S5gKpOCBBNAywOLGr6rabproYMbcFW6N$fMWmzjTL1lsR1pPDFoqPAtddrut8CM1kdtydhnyMWt-AZM7fNBuwnnsHp0ESuAw8vcDSbe0NhW3EB7wfnA7NYcQEegN3hyeUskzcJ8E8DrLh$gTAlv-njhZSZSpbvpXTKSqYhTQ$AEEgHZYEOnUepens8pNh28ZYhqSqJS68w8sX8wNp2e8Nn$n8l6B8dSSyYN2pK8ZlpIJEnEtWKmNFDEDI838SsQbBOhDvprrShpjns-ZqP3vclj6qp6hh9pl78SkpkBv0bd0vTlpJDZ2dUEg+jlchuEWYNJExEpN0r5qF08vgaDaSdCEZiiGh8OduSjJbHIse0bSMnZSfWDL7P0oLMpZvgZTgYq70T502p106O0USEIvQnkNRnEk8mhQ0TkqEkYjaQe6m6-89n38eS0x38s6$7BnEE816Wq7E4EksEMhZCSFQ8jhEe7-Q8lgSny5Kv$bBFKgLvK75nDEw8wiNqeMNnsgcLU2+h3FuRevF5Ra-KWe8YhC2OggkmkX60JwuEsnZX9m+peTukpSv-JBZnHKcYY-8lED8br1kbQInSxoDqh0GhehWiyIrC-ZQEv2buSv8e5IghqM8wvppkYelQS630QSork3Nd0r093v0160YO2jQW$znCRrSF8ew2d92M5EQXp2ALlQip5rTxc23sYhaeRREKYbpKKEbKGFDQqEAHqoEKYO-Etnd8cpSnun6SkcW6gpv6pUnuSZsp3EWSppKNUvuSQb9yeBtENmlEB+JxGH8nqeFMbKggl7Q-dH5Lv2giKtEXZlpGa8rQ8l7lc0bpJ1D$Qcaaw2ea$JCywYBO-uUzCKYCKkDzYwJQ6JdxStWIXkcAOn-srqN-4WuE7tZ8mUdtvxL3A7EkI-WF0TklapE3-SdXJCaY4Jtaz45tndmkLRXSdpxdvlIbiqrbtq2SbumhEQjTEhxwt1dfXYkWTehhvsEWjEj48dniM+0hrSIK0TQXDaBQO2ESpvtkfSkrGEZkng0Z8Q+hoF63Qv8ElEx8N2g3vxoTJD3d3mXR8gZ0R3KGpXD7gGWZehD16TrEqsHdfH6DYylnqpY$Jvp00DsHku6fTKvBSirqNTzEnmTEcv+AsCSzeeJbb+QEm6-n$DEvtJfvL+YeggerDEz628hvLLZBpu9Y3S8hjdrr4tSm-8gsNQIQh8ERvp0uKOldKgFvhEoX8IsxrwelNhKfA9MNcE8rNZIKSnvPdXn+JsS99vWE8Rmg6ISdPDQ+7zDEUS$0gdz7jrdCSfhq8wrG00581rMlp88vEshBgy0$1N5EUsOOab$L$0eWh3q+YzeivNmQsqr8e8M3K46EvdgSdTFjLK6Efe-3har8gojEELD2fdepUARDEbq9cF3rX6gnfNXPLxpgqoPYeEJk9dNTAlZ-yr0jppeUoXDcIkgiDTGsQnajhbT2$khe+mygK8Ipgf4vW3s3whEM5l-flHMR3JLdpQ36MiU+Jz0tHm8PzgZYOCT3sm32YMDK7zMmp02SQIRGaHkx0xkFMCQXAwJP8AvJmRirrFI6v1EbvrwCrjNcvcLO2Eh0EQcnQoKhKmJ2mqLsZJUpMS+tRcpcpjAm3BDEFpfMq7MGpvAKQls9MRUddv0hy3mvFgPZskv39423OIfOGl$GheqNHIEl8U$eOfCE0AxpqEKfkopjc2biNk23F03qh+SxgpQcqE9lsnmqiNREkNWMfcF-K92-OGSK+qIgqgb2s+yXt1-QnaskYsjNYoqHCre$2phl3Inr8q8p6qmXR2FqeRRQ9DNRg3OvYUABqhr86gSRjmUNkgHz$Q28CHARzhArRynKOPM+oJrr8dvTJDKP4p7+pH$KOqiWg1$N5DY70odg6gBCHZsISeyr$EOhdkllwqek+kh5hgPuu0Ob67A3ijZqTL3nzJMgP48E8MQ$QDPGhimRP80+HyrBt1uox22Ecd8gm3SzWmfPmi8hg2GBBWQSZtzzllr2H6DCzmjfJ+tslYhHdYBKEyEtq8mhlLeGLxQYDNh8neB2bRXLe6BBx3I$cEOOv0BMowSkkpREyeZbZgbdL$zq7yEhD1iSth0HeAanKnrEvX6d3pBYkqp-xn0n97QLNledTT3KGCshv-sl2EIeibASRchCHhg-AN8FDhd8BYwl$wguplej+SmuGCb0pqyEws1s9--T0go2DlQDWSdPp2ZSmo2G9eQu$Sqtey1i2$bfqrq0QcBvADYNg1s9UQs6L3PnOB29SsgaMprI6i-qHEMBySH$0mP$O277MKuEn2lp+YECT0etSHg4iyhQkGzjt$2Kq8hbEhwaOgleszXPIpsqnbclZsjXyU8YLz68OoZvS78LcaYAKgSw$2GdA23jrDd$pohoLwI99xylv$4mR7JZFSTEwcqBQDErbZYihZa2Jyt6kqp0QE-xQBJ-LnLeF7yjXDP5EmAYFApHArw6O1wvF$ZFi43jBqE+uuqAcFbmAtaHuRFiTKMGSwBfAU5fjZODb7nSTSjqvu3fs6gmXrEi5IfS6hj$WmnUzDWiNqslWq$PpKgZyNp2tEDh$AM9vff$nERbWeCUwiLBi3L9KX321BSdJwOrkErYxxIQ$km7eQoWM29GdHPEpgYf9RSD2iycOsPJN7Cqe$oltN13oyq+JjUyTzz8S-pRwj20jdvxTlSCoUJMbKDL+0-PBgQeQtLao+Rgw5RBjirSPx7DE3QyvPMe+doE82Z-phn03$pBWn-+YZJlOjCE1QhpRuAYSeXiwFB0obk9DSSZI0ckhpNJS4f1mRD9p1Kb0LBY4DbqFh7ncr5zESWQL5QRYvX3ezAQNTDzXNrYxIxKHpX6eNYvXdg7Lz8Es-GPJxvk2kszmzrQHEh2JZA1YxlEWIv-s02tYt2dNrs03yesJTHOQPAyx7JTGk0xAfEKmnxX84g9YcXhgFKYEo0ug3jNE-r-gSDKdtYaQtY5dFEujO8E0p2heNYASRJus-rJepx-xzxmemNTr9mzQ4YI3ODNr4bJEJlpd4898nM2E5l4jTcRDT0fJPAhBKe5lPbugPQNsJJSsgYGpIbd1OD4LBxolgeqD4SNQDNppfrY0ulx8FLxYpRQg62IrYrUe1MnvF3NJYgpM2A2r5YFehrJ1+KRbjmKSmHpkEuoNhbhWcYQQIQl0TkYeDGFlF8uA-AwLpGFNpdyrYXTaRJPJ4rr1pPpzEqEdSD8NnEzA3XZ0rzYgTMUHNAfjhrv2dLCmMGk8+epYCSWEcrcMdbxDJJMDxgT0ux0Hs8h2RxrU9l5MubNDEJjGFKPLEo8p3cNWpkr86pYMZOPsfgPSJJw072DlADP0ZazGMMysS8hdx86pfHEu3LBAO32KEqNvEpIMkTI8kimrhtr+ZwEuSENmfx3rYN7NT08xNnx3ErZW2HTkJbdSd32HEB5vFLkYAlibFgGHEI-8gAfJD8NI-Ym8N7IGulCrqk+1IdCjhsyAjp42eXYpvlliqZhX62CjNi+Y9bNNrPhX8SmKS1hNkv6KScSl1gTxIxTIG8NDeNYQlyRj-YAGkgW8SQmlzg6EN6kqE-tME6r-5JwM2A3KZ78ZTX8xh2xsEQALCMGHkvGjES01hdS0kE+3uQugZiJMWgjlN0bJDJuQIKSQkYhs9QNR0mlf8U2G9gkztENIqhzErNpsfYB++b3G8z4AEc7puvyjz8N1dS+2km+HNmp9FXKrBOyghpXjuYhmia7Q-dBFZBi-mD4g-NpguH3rrKaj6EoLBcRbp2UgxmhMhJvsku-2kKucLt-ETIIeTUhCTCRsTIRXUDJENaJGpRio-lIHE6tSp8LfqB234sEHk$ltNle3EsiwAm8-xYp98ZgMd3zrYQTwPsZ7IXZDE8FrixwSiI5gFexcEFuArRTdZPyLHzGdC0HUGciOq3F3Ee5A3X$rhAweqb9eSNpFr9O2$e$Mi+hBJAk$wRRK9pX0MlYENO6zNNpJMElFRS8Ur5A20xhsDEDHEOwy4D0lisgDHR6nrvylhO0LhCOvygizBa8DS26mdUxS-Qghfe6IGb6FDAGsfKiPZTgU5pdA50yEOSA1-KOEKmKDHhNOnDNj-Qv8NPPc0YoQBkk5Todv1x73Nc1JEx6Xu3KrUErQk3r0q7urJLfSdAxMEu61kJhdhPHuGHdx65$SmEPSESQshBjQ0u6gjGh0jsZZ1rTrvbErujXM6f9E5cZBnEkqtvpiebNGC0fYpipyINQl85DXocloLw8AhNplvghS4bo2eM2N$nQX83rpyDzJcHE7INTDKEND4KZ6hcOgpGb0MAOGAcN6Pcjd3mPDNghs7N8ICpNNTJsEfvEjrIovdHEup0TmE0xex0qCq6pN2NBiTRHyrZ0zlEhgGJLTI8L91MfCdRH4L0pmZof9yYJpcSe5rCTh$b21eiOcjYo1tDH40epp$N$Ef-L-jeNHOHkTGv5MEXFu3ere$4vp2cqIdGr-wiTd-XgUX3cYIHey8qDmrAMs0iWNFgmQQDdNxXDxTfdjhYdNGeQLA0paffFvdyA1$fTtckJ2B4OIINNMoesYQNqOK9yA3btHO3gkD8Dlf+kWWD4S+li3EX3KeZTHg+xxv1NSperSrLe-wjpIy$keyOqL8zyGbplZwnmNTegz0OrtkqFckFRpLRRrYNj21rTNhphBH5xLBBiqhKkiA0MEbGkvx1BBvm3HLwyZcF2xv8e+eo20DgbDjATzynKkY8jHp7F4YD05fJZywOPp20p0fIfdvHksWQlPeGwql$1Aagox-dpZhdAdFDfkx8ErU1xmEr-Dc6fq0ZhDF8wwSEN1CJucPDRmuv0Bdl6r0iEfkKiZpeWe6j2xc6TxqplLfYb90+md4NkJM2ypK3EpXHwBJE5mT4hIY2x0e8cfd3rprzlhQ3ZTgZqw2d1pi6bu-AhsbDtMO5ZLJDtEKwBFbRatr0brF6K9lo8syt85KqKouAaXdjda8j-bUpnH$TNlRLfXxGbHN47KU1b3JJEWZ5DvcfhOhctKnaOJlnRY2p20iIfXFR3MumNQ3QZ6fxGY8$ucZiZUbJTJTpNH9HOJuXbZFbphcvKsGEIqWrALECNg8$EW8I-GKBiLZ$GcNqNPChImljnhXqElyWwDJXnPhpy8eY5bNkzs+rJss-3lNdOec7ElZOsGb8L9NwZ4HBaRtXq9AKRNTJTbeiBzf+eRe-e6RdWH3mE1EvEYQldOYLBwnq6NiH0zm0Gcx8$$egTDKIGYB5gfH+GpyMbM2rU8UMncbME4BlF7RqNuByn6hlTMEKhHWxBYmlZWASZz0CgkK5AHOGe3$prMpWwmkiOHpPX3mHpwean4Bzz3W2DMHUT9FJu1btw3h5hfhmySH5fcERKSEBNs$AEsa7ebbJdifsjcDfLCS9Ie+3mhjYLtGKEkXqXydMdEpTO$5NiwEzxdgW8Cf9tszKOAlRTH$TcWIb85N0e2kiPpSOnU+Mucm6RfxNfzhdyqh1BydhRUgUeBOC2ewod9bW1A6J1JDmh9FTTqeijdik-Mvv6OhJtIChRrlCl$1Xg$0$5cbhz13z0$MKS5kE8iNcINyDDqAAhgJ00mGHE$M19gTJePe7-qOiOq$K93dzSZRMfnmXZADiEF-8RHR1KKQS5jNbj1jgL9D0Ho3Xu0ev-2-N4b4MeUbxIx0jkGkmE6KOTLgDlyWNlW87IAUjTEfuWGxjau3lr5Abii87yQeBlFLTdjzMuQqav8D8pZRWoiHkTgHh6uRzhXZNWMRXHfBf6TauCBpbQ+EWd23u5enjkmblKTxxM3fz$SE8sP926WpBTgpbWrYmqZkeJLC$WbQ2U00gFeWLgbSqg20CE2djMyS9C471n+oUkbmKC7lwo$3OfWIYmkhpA1odIKQqmlr0pddmNgFoQK$idbXko$eJuH0sge-PEYa5aicESTXvvd3cCkYGCkhDr8hrF5ubX+SndLe-S5D7fim2eOoC2gOazibkitcu38OzhQm2Ug6EMQInEeJvce9AbzOxb4MZQFGQP8QYT$GJiadgQho0v+El2NH+8wQKkYXWQbQEhLvuwbXkbsrrsuEWINqnlTZzW0FIYKBnM0mGLtzIIs-DzYTxxJjdQSwRIcsREKfIyjEPtJz$C3zHEFRWNZcdFaD2sID9fnmh81WgQ8h1I$zBRgkyzBsU9DyylyOyU0f8yuJ0oZ5cCvOAaHNAJliGCPOzjf1DMlFgL$m$-6hA64X8tyR57xqjICTrhj2kMZPIm5$rByx0P9MqNeSOwIUmUH$+C5YQvo2Gdu$PN4$uEvoBQ2oqRaZGApaQ5Lja-R4KRnm81fF2cF4KR3FHk0exB9yhNlIr7Oqpy73lfa9X6W8udo9ZFQEcG1vxIn4X4mzNty6N64KB6O58LOhebaFHWX9B$Yr+er4Lbr-gkwUz0$c6p8n+pYs99Mn28a1Io6EIpj9eXTtpc8Po++MoQNwwmdmsXtXoM3Pg1ZYZc4Q1hzuY8F9unbS+FTqBW$WQjHdW86bSpQAeYtGZtPNgMPJspebPRkcOq3NEdN6J7OPGyy+zRaQsGAhFjjl$f0sqmioZb6Uof9+ZLRjlt0I9zqEE5YQxI2sRBOZWWwBjomNj9ozrr08Djf0Wt721QM2GHUm-q7q6YrWpXM8AhsG3dvcMvhN07G9+kA9ndd0knrjZmD7DBWhrJjQd0sntn$fNNKfGYFpUkv-xHoXF1uIC7ADx7RHqLCM5uGJwX-9sEmfQDFII7dI4M+D3DUbMD1DMWvwWb1FOhbCIH+eyrUJZ5zA+FBrAFhfjjIxGjtxMxLECskP6TrUrJdUhoEBI4Qy$dR55flenbhN-vAf$P4IcjiAIQsfDrwetOidbCheZgY++uU9D5NpmvW8txFAgLIIzC8hsaBF8Nhprr1yqvRt8m$NRnr4N1ToijMEErM96cHvPlKJ8Qd9IEY3rWR6Qwgq4+lfghhrgPlZ8CEJubmBERCrlSJ60yDiqyEFsU$6uG7$-Wfg1SFrvI3KJqSDjENEqlLmKQQofStSjrYjHKvpYfgJpxcaSJTYhB9fZSwhqp31eheOrqS48jE5rEk3e6kn$NJ81BiTbzmGpPF7nvhjRYfgOphyzh3qRydKIggqZDg8hYJpkhwpZENvdO+pJm9MSG6L-ehmH3HnsDyENlbjghgwk6rFSMJgWQNQ2gyvUSSTrrQL8iegkASMwSdJN0w3bv-hNlYKQLet6rp3qqTLrNxpw3nvi0681EcPujdElknwpy0Dg9zfRg5BpBjTgq0OSRvAaKMJ4OB936EgvBqTQF8Klf3tS3izhQEQlb6eRNinhBgxqOe6eQR$6vI8miBHpnol8EvMD$OB2d35omTYzsZ9BrpSw1DrdRvh-0e63jgwEHTuuDZ0jvXvm62hhrlO3N9CqknBDSTxa3PPUvvnLEYNAqS4viS-q78KZY8qi9qZagoTDFrB9C3BZ$SnxSZLshfUvpagwMXYkDYX3AtWnb$Mt-08XexvLnxSrrEoPKKCt4njT+ZKQgCTbgzrC2LgORYImDnrhNgXGqv-yYlIiZlp6gCRg7hFsDhfrftHdbCe+lJBsl1308eCgsERwupbEJFWZEDNyrdNbDr2YQKpqWFoToZNAq$6Nz3E3T$eSh9K3pmYL582F0MYQKT9hwTEUkAq3SYOppfvdpHiR6-gOpMsqWDHbLDSFjvbEs+KZgT0y9F9tSoTTMQ0Hwgf6bsJh$BjKHoe0S70DrITchS7hRErL9E7km-MWdX6+svpWBMI3SPa9+elpTH1SW-Zn9oXqTstSc8OnDnMrLNwTAqEn6y-vaHTghDSv6YmgYq4b10nHrw3DzjyYidNSBgUjE62SLBcyJlQv3WgvrOsvHNyn188ExqGkUOC60-gD9qEBivESObQ8-lBIvNyNJyQo9R9nIdNriJmjdpIpTniiAu2cHQn2q-hop5RCNPhES9srp8srseQhPt6RhEA3i1LY$NWpakzvx6e2d-vY6akzhWf7BvqsDnvNDYN$vX28v17Dh6y3a+$PxN99Ekr52wdc2fgapx03iS32$YeSQh3ELEdn2h3U8KIa6AH2UkIyL8BSugXdrFQWELsYRxTrh8he16lPkdBkF87$3Q6aT8jLE38JhesDEv1M502gYIvsH3FtEwXvS2OeqOcvr3U09Id38fISGxMud3NDXhWIc61S1daReSJagQ20spaYEGR$yy9rkjPHSbm2YQ-kEDMALs0LFbJjK9tzcHiBg$qhYo8xtZSvagN2alLdkjB$38rbesMshLpGEi8OhEEgqhhuTY2H6pA6vRgZHhMljghNZwtPwjvSprhqFta1-rTfby8Tb33wDdSXpEdpHWBq0ggh5uLiDGufvKZQynZ+hplvHrxQZgsbeSr-DCRasSy8XrpNNe6mkR8RI8m5rxYaDmd6RkhM0iw683yZjk6lCgXOhL8cjfnXpdkN0hEtdnm$SaS9v62fSrrnfoTgmDvhx8HZAsbi1y3F0-vRjQy2kaYeobCv5rAsqOHdgF2KEL76kl4KZ32hTSpTAs6NuD37rIFikPrTkFZSqYZgUqLdqTlN8iYekD6fB98fNS+83YAdAso8GEc8QUePEiIdNx60TnYtv9qIbCvc38qnOEPeIH6JFpDEztEfkmSqMN09JRv0h6rXTOhjrSR3i9udclSd2ayNE8E4Emymp9g0fOxtFrONCz562fvZPaEx8aqGZSm88ZFsCkfhg6WRv3SNpYpYISivyqQpywCks0qyey8XIXrGpXQ9+STrYkmmvWGe8tT8F0PtwLi$ebmpiI2s0m9q3K2Igcn7HcrdEs6HI3Tgws$rMT6yMYe0ERS$RYu2g0GJG3HSGbkzeydR3iZiqjmWiUAbu8TgwEQyNWDyclEGZXPeiLnA6Hs3rhefQ8YeXDDnDzWySSZlLPK0Y2PhaPumji6hrIE1OsPskFK8ymO0BvI9itWlfYqAJjjFpM6QiZCdUp6t-PIEeiAwSNS--jl6tZ8gPbWDlqFDsruPehjkWWTvfar0fNW6GrrSyLGmSEXODpSQOmmdTgEzB+IYWOJDbSjiaXAoSQ-wB7tluMueJD7-woALKFHBCPSuO2mOtrcDy1Z8u02fjmownpHie--rSUt3qNv2YDxO96UtT5rO3xb4qQPXr2wPXjGJ4SJqjmNhryeEi09LkWmxi-bMUJG9blN3OvxWgGDrY1PNtqxMClh869l8GmzB9lLHhq$Btnt9Jc+0t8n6QmdTWpM+rwcvZrSWFDina149A+SwxDXg9ZChiNAiI7wDgkzJAqNMxNqIDi-FphvF9i3NtDUJjDTCEMNkBf$xMnxlh5-N2rDcDKslUrkhDTKw58deQlSrgXfOsNgaA6p35qyf13qJrSjE$HcgsxIn6usNY0TMO0fN5ZUbQk$icJfA37W0I1AQ9qCodqM65nQGnuqKIY3X6TqsyrEcaSOm7ryr0Sgf25Pr-Qr56dp3vhOf2kucvFJkCJtbfB-zmGiKqRe$ZmFg7g$bEl5-p7Pn3hMJDDqkrAlN0wGRJDjG2hUE8wqZiDXGlCKlxp-3DiyO14hMjR2StTwWRs9M0MHrdEEBu68H+FAoqC-Tg+4r2gKcU6S-DitDdHBQWOEdE8q0dvGJ1h1rd$ui2SjiiRpGS7tQiwZshvlcwp1L$EJlnrECAJfHOJLatpxIclX0XELhQFlUHClQsr38hAiX+yBc7pjR6EfIm8MLKk08E$CJDY9OnTq2-DiL9NQgi2tbSrMFMA6HL$OZOPqZnOQuWfu$jlfWmc0q$naHQhdvaca0fN8QJrlbvXry3rLiuHpn$2Dh58ptm3gEtPkKiiTR-MYYcciryMQTigDf$OvhsrrmqQ-l1QdnGgar6dBrrf+fgcPRMHd-t1L3LMy2cRi$-MmvoK-0+DMrqINMwo2gf+kmmq0FmH933dnXEPFdrG30iA5LkKjBROp$CiSc+rhYHTOMKiQOE7-MRiR6rPH7OFNAsniCyAW0zli+Amqw$l3YrC6T05M5i-qhYJcEiENoLdOQsYDjlIfNo4xrceGhPAgSSZA0ige79vqs+prcL+-jW2hvS+DM1L+oAArKA3+Ko3L$7MAbRhoPFoFKmIjc5jpP0yo-807mu0$AD+DMcCxCMFCUYq$tMrwTdJ5b2ljPdo8FFXxhOjY2fjqD6Z7d5Dpcd$QtpL2-dLC2cYP-NmAJ1G5rkvYPRobF$G7y$tl5PMoMFZACZ$zl5P53vFZAR4H-l5fxt7FPLny+xAgw23A0qSlNEo3L+T3h$h3mCdzAs+DMigISLSCpAZQDMKgT1LciTMX$L3HZfMxh$zAZ0FoA0BnX-TkM1-$35mY$ApkNlNK9EPgoJ+nCE3NKb3deuv1T+X8NKa3hi2vNrRTBj$s3N66isbiqM2SoMdEpgvn9A+lGMs-F61dk+MTgKQ3m3K-mZ+iAM0rQM6OzsbRgA6I7o$O$IKaC2M$KJoOOCI1aRBoC2eosOoMdy+qya0oQEdzd3FCnDa03QNdCjm8g6MwdSQPOIoA$Idcd$L-ALu58SkWlaKwqYeTydHi3n92InEcqmXD5mfM0H-xO+opi5$c-fCM6c-RsiEdyIKf--w4zAH$Olcmh7hOu2N3i0AnKzI8fk+M35m9mKDoqfo2szE0uK$rof38hQCbCS6EsMopz+dQJ7cJD$3AySjrIShotE6EwdEGxv6kuvKm86rFZSP680kpNDku1hDEEEvBfyqK3kEbh8EXru-MIRZgrEoEHEsFG0GggoOG7FpQhc8rCD$IbEFaKl6hvrgWZ2iPSmlyyQ4hB9w6KSapA62yTyqXK58Yy7OjZ31cnSjSoEFZrGePRbsFpKBsi2EEuh8sK8irenrs3oEMkgE1cc8e9$Njps1p-3bypEErlhlNXBHLeJ6Th57AEKiqr2z-kEffCklPqkAwnxhKnThNpeivKESggrllZsbjRmugSb1CEJlYqvEvZFEE3ErSUEES0AWNO2d2QjF15hsWL7$3B6Us1tElKE4WNvZF9habniH2kEvLabzALx8QBREj1abwODE8KEHhCpTCfAx9RAdWpXEfy$8eEEGSCFu1abuS8ZekhRS-7oCyuGv7keG-6EwLAs2$81BWsTDiEQ0GTSNPzM1pfEEE2juSJSPb$tdhSCcMn8zdE3Jl8eTSisBz9$2JGl3oSePYrqEs6S1vbnjnxwdNrKsmPZ8knFp3fHxH9hZsjn77tidE7W+JhyS-pdXPwgX3vqYQP68t0rxiTlSGSXRGiCISk6cPFR1pYbmGKT8wEHIbzyWJo6-JRv+KDEOy9sv7ienUGnsnya6H1$WgPMghSEXq2lEuBwEu7zrHE3fecohEep2CiE3gvovZFkpvrdE3fY1gpEzpSN0L8KihDslN8NiuESiYsBIQRIHr$L2dCvIh$TDLhAqeBg6hkEqEJXaq2$Cc6wnLva$WYJd3tgogIr+CYm80D$vBhEEIEu5xIjh6TYbieJd3Ng-r-7$yux1jEXqYF7ksa4GXT3Jumj-7nlKh3bgbh0Et81pEE2tEE"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 03 Apr 2025 23:48:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 18:01:59 GMT\r\ncache-control: max-age=7200, public\r\ncontent-encoding: gzip\r\netag: W/\"67ead897-5df3\"\r\nserver: cloudflare\r\ncf-ray: 92ac753c8ced56c7-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nexpires: Fri, 04 Apr 2025 01:48:38 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (24050)","md5":"5e8c69a459a691b5d1b9be442332c87d","sha1":"f24dd1ad7c9080575d92a9a9a2c42620725ef836","sha256":"84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091","sha512":"6db74b262d717916de0b0b600eead2cc6a10e52a9e26d701fae761fcbc931f35f251553669a92be3b524f380f32e62ac6ad572bea23c78965228ce9efb92ed42","ssdeep":"192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk","tlshash":"86b21323e5f5381a2516a13ca08a92dc69356073f7f30e9eb985d06cd78dd791f226c3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:57:59.30551Z","times_seen":459205,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/cdn-cgi/images/icon-exclamation.png?1376755637","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fdd.xu985795385.workers.dev/","date":"2025-04-03T23:48:38.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xu985795385.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Feb 2025 08:35:28 GMT","end":"Tue, 27 May 2025 09:33:57 GMT"},"fingerprint":{"sha1":"5A:FA:90:8E:0A:7F:93:C1:77:FB:A5:2E:C1:C2:BA:F6:F6:F7:E0:1D","sha256":"B6:1C:A5:6C:5A:16:6E:88:F9:7F:C7:16:C3:2F:60:01:E1:1C:9B:74:6F:AC:4E:1E:FC:12:ED:9F:EB:A0:D4:77"}}},"request":{"raw":"GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1\r\nHost: fdd.xu985795385.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdd.xu985795385.workers.dev/cdn-cgi/styles/cf.errors.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 03 Apr 2025 23:48:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 452\r\nlast-modified: Mon, 31 Mar 2025 18:01:59 GMT\r\naccept-ranges: bytes\r\netag: \"67ead897-1c4\"\r\nserver: cloudflare\r\ncf-ray: 92ac753dbcf256c7-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\nexpires: Fri, 04 Apr 2025 01:48:38 GMT\r\ncache-control: max-age=7200, public\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit colormap, non-interlaced","md5":"c33de66281e933259772399d10a6afe8","sha1":"b9f9d500f8814381451011d4dcf59cd2d90ad94f","sha256":"f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016","sha512":"5834fb9d66f550e6cecfe484b7b6a14f3fca795405dece8e652bd69ad917b94b6bbdcdf7639161b9c07f0d33eabd3e79580446b5867219f72f4fc43fd43b98c3","ssdeep":"","tlshash":"14f05c45c595e9f5a90330586311ca15ab7701c6276726c9d3854032a456482ca97f86","first_seen":"2023-04-12T19:44:04Z","last_seen":"2026-06-11T01:59:33.512153Z","times_seen":326474,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Sinkholed / Blocked","verdict":"suspicious","severity":"medium","comment":"Asset commenly seen with Sinkholed websites","tags":["sinkhole","suspicious","cloudflare"],"meta":null}]}},{"url":{"schema":"https","addr":"fdd.xu985795385.workers.dev/favicon.ico","fqdn":"fdd.xu985795385.workers.dev","domain":"xu985795385.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.145.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://fdd.xu985795385.workers.dev/","date":"2025-04-03T23:48:38.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xu985795385.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Feb 2025 08:35:28 GMT","end":"Tue, 27 May 2025 09:33:57 GMT"},"fingerprint":{"sha1":"5A:FA:90:8E:0A:7F:93:C1:77:FB:A5:2E:C1:C2:BA:F6:F6:F7:E0:1D","sha256":"B6:1C:A5:6C:5A:16:6E:88:F9:7F:C7:16:C3:2F:60:01:E1:1C:9B:74:6F:AC:4E:1E:FC:12:ED:9F:EB:A0:D4:77"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fdd.xu985795385.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fdd.xu985795385.workers.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 03 Apr 2025 23:48:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gW2f5jO58Ez0xSuG8cb49mVhxQYDmwx9HV7WIvO5IWK%2BQRWdZbDiROD%2BPkFy%2FO7%2BDVXvDdSFNUz5JNUelL5gREq6tpqYgGJF4b3VTcoNY7P6JvC0MuuZbyChED8dJ%2FsnSPdsvgC7ELJ5zWgnWYg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\ncf-ray: 92ac753decf356c7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4740,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4977), with no line terminators","md5":"3857891f93f1b095aa517765beaf8c4b","sha1":"9357d66d320b76404580560b414a8d135abc4595","sha256":"dc6ec93aaf96126ffdb43a92e39d6704d6896919f3ca1f50b1ac7852ddbf6c52","sha512":"68c6d17ae19b5597da52770a232d8e91e7146f43fcd2df5ca81b1fa2cafe69d7f42a0d4a5d735d9bb51edc0091539d25c713fb2d9c7edec3bbaaf6407e704232","ssdeep":"48:Tg/Lzken1nXDJDUOOYNn4Pu577D01Rf6aLHdzREwCwDi2Nl5RjiHhLGeoPv+LRBe:UE0XDJDUdCeHBREfwDhT5R0hrT9Ffy","tlshash":"93a1513b78dc007b105355a237bd672e3a28f444dea6009136acc17d1b5aea4aeb72c0","first_seen":"2025-04-03T23:49:02.775706Z","last_seen":"2025-04-03T23:49:02.775706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}