{"report_id":"1f371e3e-f039-48f9-8f62-95240bf05cce","version":6,"status":"done","tags":[],"date":"2026-02-11T03:51:15Z","url":{"schema":"http","addr":"join-chud.fun","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"104.21.94.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"join-chud.fun/","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"title":"The Life of a Chud | Airdrop","dom":{"size":27457,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25596)","md5":"25cbe66b700344d85bb7fb52df5d3fe6","sha1":"1fcd9a11abbfd0b21cdc652cfa8c0c496aea8c63","sha256":"667c2ac276377ff03c82c4c1bc9ea1e20677165db09e3c272b67806d95cf3abb","sha512":"65147a16b56f232014971cf75d819e4eb1325cf702240266b6200172ddb3e37f548ac7d066ef0e12aefaa75c65022bc75af3b6b525636bbe2df98fc869f3aac4","ssdeep":"768:vpzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwc0:BzqyrYJOZB0EZm2","tlshash":"7cc23191f550893f3a07a2ff4ac9de9d725130168863bb4d72f881c2f686eb35db5818","dom_hash":"domhash0d7296c25004807326d93a4aa37677bc","first_seen":"2026-02-11T03:51:17.462493Z","last_seen":"2026-02-11T03:51:17.462493Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"join-chud.fun","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"104.21.94.173","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T03:51:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-02-09T01:16:16.651241Z","alert_count":0,"request_count":1,"received_data":909,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"join-chud.fun","ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-11T03:04:45.479984Z","last_seen":"2026-02-11T03:04:45.479984Z","alert_count":0,"request_count":8,"received_data":505088,"sent_data":3562,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":7,"received_data":148689,"sent_data":3737,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":2,"received_data":22180,"sent_data":950,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"marigold-rentable.g-app-d.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-28","domain_rank":0,"first_seen":"2026-02-11T03:04:45.481825Z","last_seen":"2026-02-11T03:04:45.481825Z","alert_count":8,"request_count":4,"received_data":709748,"sent_data":1897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"join-chud.fun/script-w3rr8.js","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13bc1d66d1a67306cbbcce392d2b762","sha1":"b9ee14a06e856751caa89f501859322a3d0da67d","sha256":"a12bdc79fd28e30023dfd939f3ad16a589066ecaf5ef1a44204f87e3a375deda","sha512":"61b84bc9339b4e4fe7d65b2f24037ba2536c39f247da983cec796d357b3d586055c14149a9ddaf2a958f26bd892a73ec71b6ac6ee9b0eb6ca6e4e45225a61b71","ssdeep":"","tlshash":"f90161794420fe31c5be14d792b8e35669a90095f2104153a32d4cc1384386b597dfef","size":767,"data":"","first_seen":"2026-02-11T03:04:50.040089Z","last_seen":"2026-02-11T03:51:17.46986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96550d507317fb7bf23119126bf67525","sha1":"ed1688efdfcdf4d0850b4679f495816eca1e2b30","sha256":"d3722d5a310a6da9164daddfcb51cf1692402b8873a0cc6c3af1729d553d4215","sha512":"38c830b2059bedba1f1669fe5fde4ce48682b27df59ae629ccb686cda909ed304b5dddc5e0d18a3084ae0a5beb537706eefa199baaa234e2a58aae65a6ef4de9","ssdeep":"","tlshash":"6fc012a01330970673601027166a3a963d23527719a40050373787417766a1f8664f8c","size":184,"data":"","first_seen":"2026-02-11T03:04:50.043284Z","last_seen":"2026-02-11T03:51:17.475728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marigold-rentable.g-app-d.cc/_nuxt/assets/index.js","fqdn":"marigold-rentable.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99781ba769334ba8374ea1110abcf8c5","sha1":"a8d40ee33b1c32856ce380e3b9688c546d78f1a9","sha256":"33080fe49c756f41c302f261e92d4221d6c329e667b203a8b5fb9212a2948bff","sha512":"5ef69f124fe3551a73bb80a47003b71efa32e58e158c2411bdf4a389386c8a8c6d85b7726fb3347359a673d0e2f53371a27294890b40c91e16a719b2b4eeded7","ssdeep":"12288:YYvNfx+ZmJNiGlIzjmoEfZyBZQwUEwUy/MUZUSMhOUZzHxLALVlKcs63WkhFy3uE:dN7f7MVO+Cx3BA","tlshash":"58e4a55a2285aabca5406bdc1cf11cb32d85b4cdacad487861d6dcf26133d3893b7f64","size":705261,"data":"","first_seen":"2026-02-11T00:48:21.229437Z","last_seen":"2026-02-11T18:54:52.168236Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ada0d3a1d7f24e885c9d79a316551c42","sha1":"bcf4af0e8f10d2c68eb05e1e96f59f8a7dbaf447","sha256":"418ee99ed1018a0ff16f871c1a75bea27c9f14ee486f283933a94faed70f1c5a","sha512":"956c92143c08ea0366b8da7fecae4eb1099a166f5e74f6b09e16c1390c26a18d03c9a100e6c8e26f4058ea50c91460cb8aae704bcb5ba1a813102732b166695c","ssdeep":"12288:7vuHnjtmPALeCZ6bzmsI/N8BVmIwCIwWkkX44Ev60f11zzOBv9b8AVgUj56vivBa:buD1TpkR6gyhtS","tlshash":"35e493582389aa7da54443dd2cf600c72e05b4cdecec58a8b5d6a9f22533d3c91fbb64","size":677116,"data":"","first_seen":"2026-02-11T00:48:21.231713Z","last_seen":"2026-02-11T18:54:52.168765Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lite-api.jup.ag/price/v3?ids=EoP9nKZMtTFTWVjkJVJEQQXAgWoFZwgVgoKspkrVpump","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Thu, 30 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:C1:1A:55:81:46:51:60:92:8E:23:71:EC:0D:F5:22:E2:77:CC:B6","sha256":"9B:2C:9B:3C:A9:B9:32:F1:2E:E7:12:53:C3:E5:39:A9:B1:D1:92:0F:BD:83:0D:8B:73:33:20:78:3D:B0:C8:E7"}}},"request":{"raw":"GET /price/v3?ids=EoP9nKZMtTFTWVjkJVJEQQXAgWoFZwgVgoKspkrVpump HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-chud.fun/\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Wed, 11 Feb 2026 03:50:53 GMT\r\nserver: cloudflare\r\ncf-ray: 9cc0e2795f56c759-OSL\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://join-chud.fun\r\ncache-control: public, max-age=5\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0530d51d2f2c72765a4aee4504a6a664.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: g8mC3xrrG31Qua5MnEIfaSZbgc18z90NobC97BtI1Proh22MCt70GA==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2e298b1bdde2d7deb696508c5fd7b170","sha1":"8d942a4f5b6c9b3a515b8ad745901c7459ef6384","sha256":"48e89929c24bf51fa1e313603a1d34bfbc0364530c86d8487203615b0ec3ed79","sha512":"43e45262244aeda8394eb58aaa500fcb4bc0724a583476027296d15057106f63dc984ba0f69f0b6ad40c58e2d486c1d5a1c3d1a654c06c560deae05748a53a49","ssdeep":"","tlshash":"42d023f1113380314c5775074ce538856d8521f757580be5d75e4f447049dcf4406c55","first_seen":"2026-02-11T03:51:17.46356Z","last_seen":"2026-02-11T03:51:17.46356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":56,"dns":50,"connect":1,"send":0,"wait":59,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/3d3f9ca5-d590-49b4-b231-9e395529d918.png","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:54.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /3d3f9ca5-d590-49b4-b231-9e395529d918.png HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 5054\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\netag: \"698be559-13be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2792\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdmNwoShc9TuHP3jhgR4auu3N7Ufl23Pi6EANHbMoLWOiCeJ8FxapKwTnCJHceVAgKJm4h9yqbsp9%2BWc0bqApr1FrBSN3HEQ2MgOHb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cc0e27bbb16b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x319, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c18a1e57d24e0f7ad263c647c15cd71c","sha1":"2a877e66812719e97b768b0442052d09fbae4901","sha256":"aaf3d6bc40f59100f574aae34c00341f1a65605c2b80ef5f5d2406c1904f9cfa","sha512":"1fab60ea9724f0f0f2d0537cd10854ce36f80885bae443a441c4621f6c75038e160631138298b31304cf5f25109b8300638c510a6408dec74b8e8717a68a39e7","ssdeep":"96:FjSmkbJz2BgI1fxI9tV/AmlIBHcYrNjgVPPtBkvQ2ejr7ZyHPuYQhz:smkbJyBVyDV4SfYrNjytBkgL4PuYQhz","tlshash":"a2a19edab9734c3101a150912e1c891f6e789c6ac2d142a09eb1db2361a5e0e7d3f3ee","first_seen":"2026-02-11T03:04:50.036899Z","last_seen":"2026-02-11T03:51:17.464741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/style-3o0lt.css","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /style-3o0lt.css HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:52 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\netag: W/\"698be559-3960\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2790\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STmTrYXwUnudG43qqJH6qeMvdalxSJLTVDpFEvQx3Qe2y6dByxMw2B%2FzJ%2FedEk5Umn5ne1EHVaR0a3vS5hz%2B40Zzm5eIJPYQ3GUkdEM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0e2746a47b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14688,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a8746114a99b8ce71b98459be56cdbb5","sha1":"17bdb2c462a2318cc707de8d85e69afa142097b8","sha256":"8f802a0d1b4e92acb3b66ed82923ab4a7ff9a82858ac724f32bfafea7718ade8","sha512":"8bb01d1afa91fb95da4c0016721bd17278cf39abe7887ae51f497b7a40dd2f969e89bd9b3adf9498df3c41f3328f024799654fb1c21db2ce2da5210710c2ceb1","ssdeep":"96:MmKjAHvTOW1i16O+pbxq18lrEOrQBTfKWTtJM02bSB1U62q8dYDijiqyKniz:XDHvC61EyQBTKSghdYDWiqyKniz","tlshash":"e06232179f415445b31fa0946fe8578ba72ea4239ece4eefa047206c52ca1d512f2fce","first_seen":"2026-02-11T03:04:50.038784Z","last_seen":"2026-02-11T03:51:17.465452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 00:59:06 GMT\r\nexpires: Sat, 06 Feb 2027 00:59:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 442307\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-08T17:53:54.487826Z","times_seen":37274,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":247,"dns":3,"connect":32,"send":0,"wait":18,"receive":3,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:26 GMT","end":"Mon, 13 Apr 2026 08:38:25 GMT"},"fingerprint":{"sha1":"DF:42:37:13:35:8D:A4:42:F4:81:DF:D2:AF:04:C4:6D:23:27:5D:0B","sha256":"01:14:5B:59:48:97:DF:81:4B:BE:59:0B:AC:32:B6:15:AD:CE:47:D9:53:36:4E:AD:6E:7B:D0:45:0B:F3:10:96"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Feb 2026 03:50:53 GMT\r\ndate: Wed, 11 Feb 2026 03:50:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-08T18:08:35.28388Z","times_seen":39738,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marigold-rentable.g-app-d.cc/api/config","fqdn":"marigold-rentable.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: marigold-rentable.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-chud.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:50:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixrvG%2FHPOAR%2FXs0OjkB3HYZYA2j%2BCcKIYLkoTo9PGcgB4MSsGJu6LI6MwcHyfwvD3C6Hoe%2F%2BZdgwTl1mvvtIpWLVqf7%2F2FeEwLmcqtLK7qBqas%2FREhFdKnm2QVg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cc0e278fb933181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"1c3e6b5a1b0de1551b04f14a4d09a059","sha1":"0203c45909202da15858bf13793e75e407054d5f","sha256":"37e4ffe11ca2ed47fb562fde1dc56304b31114db81fe479fc1729167eabfcffd","sha512":"85058937a6312cbf7be345a27477813892f80bad11bcf57935fe83015423fc29529002811d24a21aa4d3f6d1a95d89eeede0ec7b63c1ec60da3caabb76314e7b","ssdeep":"","tlshash":"4fe0e7e103415bc4c1210382f0522d2be3548293445157a9ecf9d37044b94270acd8de","first_seen":"2026-02-11T03:51:17.467447Z","last_seen":"2026-02-11T03:51:17.467447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"marigold-rentable.g-app-d.cc/api/visit?origin=join-chud.fun","fqdn":"marigold-rentable.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"POST /api/visit?origin=join-chud.fun HTTP/1.1\r\nHost: marigold-rentable.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-chud.fun/\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 03:50:54 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DmMDGZ%2BbvtNtWQisQ8cBqNWlhxANDyp3H7EPMoTYNa4yjQmdC%2BvIlhKiG0TMFewKCJPWT5qTLU0d%2B7UkJyrDpeo9OtkzPGxqK%2B0cJM1tWdzvvaGGPD5UlRpTLao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc0e27a08721525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-08T18:39:39.479197Z","times_seen":446716,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/_nuxt/assets/index.js","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:52 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 2790\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=405xSI88UcKeqT9PLm0cmNb1c9C5XwFHwytrRx5uCDKxr6FxRLVBmx8C5%2BOWviFet7PHtrEe%2FTLwMTEqUW1zXl%2BUMYzAQQm97m42AOM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cc0e2746a48b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T18:43:01.051599Z","times_seen":17783985,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/script-w3rr8.js","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /script-w3rr8.js HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:52 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\netag: W/\"698be559-2ff\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2790\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vwJHhy7GZQevceaVuY8OJFB13mi7Yo2JvVQVCwnsvCs0cNeqcsnOPPNPzjNrPLwWZyq1PaIZNV%2FpkelDmSVWoK2tCVg9jrfkDPDM1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0e2746a4bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":767,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (767), with no line terminators","md5":"d13bc1d66d1a67306cbbcce392d2b762","sha1":"b9ee14a06e856751caa89f501859322a3d0da67d","sha256":"a12bdc79fd28e30023dfd939f3ad16a589066ecaf5ef1a44204f87e3a375deda","sha512":"61b84bc9339b4e4fe7d65b2f24037ba2536c39f247da983cec796d357b3d586055c14149a9ddaf2a958f26bd892a73ec71b6ac6ee9b0eb6ca6e4e45225a61b71","ssdeep":"","tlshash":"f90161794420fe31c5be14d792b8e35669a90095f2104153a32d4cc1384386b597dfef","first_seen":"2026-02-11T03:04:50.040089Z","last_seen":"2026-02-11T03:51:17.46986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/images/wallet.webp","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /images/wallet.webp HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:52 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\netag: W/\"698be559-48510\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2790\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyk1Pc2H3zgwJWvfNBuB5cpCMQl6jK4g4H6NOGl3yhvi%2F01nQl5eunIyShrbRpVKLsQLH0C8ZdWqxgIpM1v5lWdJBfkj0RxHvYdBQzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0e2746a4ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":296208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32fce5ae8ce0cd808abfb5b27adf94a7","sha1":"7e215d10affca6f6a52ee210e2c10c5a5068d6b4","sha256":"ea0811d94996cdea8a4ac859529edf748d62b71434e1c41cc13f4f61ede47329","sha512":"2b9ad8ff78aecd4564cfc1297b60da731074205f98edd324cb4a0301351ab75c1a6b3da5292ac7733b7e1d76804aab3d5500ba33f254265be59e2ad7a8cf232a","ssdeep":"6144:cSDSqlBxS8h9ni8bJquFUb0qeFGUgXPIkQzEf2QHqcZ79r:cSDNBxtNv2uMUKf2QHt79","tlshash":"3e54232861740db5e9a75b326e1cff3bc0ad450b3ab17a65b5c0038acc7b597bc690c5","first_seen":"2026-02-11T03:04:50.040922Z","last_seen":"2026-02-11T03:51:17.470612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/images/bg.webp","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /images/bg.webp HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/style-3o0lt.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:53 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\netag: W/\"698be559-28328\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2791\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASK1oYz%2Ff9ecLcQ%2F0xM4ZliXGtgNJyIxuQppPxKlahLXu0en8ERsnf%2FcZ5xpKwwcFPpOLI0eodoW45pnrfOnGevxtnfai4TPP11fqAE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0e2770ac8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1921x1079, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9fd241961a83ae7819dcfce1413b039c","sha1":"5d516f6c50da7b887050b2d8248a7ea64c0f72d2","sha256":"58f71969b767989b16f2994fc4d2e8eed9bc12ff0c6a8fc75f956bc70bffa771","sha512":"b1f0fbbc77599972e3f8e027a2228964033912adfe907781375c0428efa7966216b5631d87e8c90333eae46498b1ab6beb063f71415fa7d4fb52d8b4d192db1d","ssdeep":"3072:ancAJIMujOiOzJiT2DRK9763EXGhn+UFXA5jTekr5w8cyKcIQd/NbN0YJO8oH:acGFiOv8B6MAn5KjrK8liQ5IYJ5a","tlshash":"e2f313f6e3485e1146eb2063b8150e8660057fb37f1c321c92ca6b5dafd52d25e8ec9e","first_seen":"2026-02-11T03:04:50.030135Z","last_seen":"2026-02-11T03:51:17.471396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 03:03:16 GMT\r\nexpires: Sat, 06 Feb 2027 03:03:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434857\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-08-08T05:00:55.928684Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":130,"dns":2,"connect":21,"send":0,"wait":17,"receive":4,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 00:59:06 GMT\r\nexpires: Sat, 06 Feb 2027 00:59:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 442307\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-08T17:53:54.487826Z","times_seen":37274,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":246,"dns":3,"connect":32,"send":0,"wait":16,"receive":5,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 03:03:16 GMT\r\nexpires: Sat, 06 Feb 2027 03:03:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434857\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-08-08T05:00:55.928684Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":109,"dns":1,"connect":31,"send":0,"wait":24,"receive":4,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 03:03:16 GMT\r\nexpires: Sat, 06 Feb 2027 03:03:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434857\r\nlast-modified: Thu, 04 Sep 2025 17:09:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-08-08T05:00:55.928684Z","times_seen":3712,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":95,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:26 GMT","end":"Mon, 13 Apr 2026 08:38:25 GMT"},"fingerprint":{"sha1":"DF:42:37:13:35:8D:A4:42:F4:81:DF:D2:AF:04:C4:6D:23:27:5D:0B","sha256":"01:14:5B:59:48:97:DF:81:4B:BE:59:0B:AC:32:B6:15:AD:CE:47:D9:53:36:4E:AD:6E:7B:D0:45:0B:F3:10:96"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Feb 2026 03:50:53 GMT\r\ndate: Wed, 11 Feb 2026 03:50:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10720,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"52e735aa88c047346bdbc94b641c48f8","sha1":"c184c1982e51c1c775b2889d2d17b886215a46bb","sha256":"8d5bd0aede64a4797f1e7310b7fbbef105f7b2520feeac156eb8dfbfd6686043","sha512":"77f52f31039e6e44c2f2b8c3663710839f85d3ece31e2bf7e4a7e70bccfe56f22970a4eaae5bdafb458e821a37628fced6ea2231089990b45e2b46ce7a520da7","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80s:UmkwU+ME02w","tlshash":"5a22a990002be804eb470cd677ce7e3aad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-08T04:26:17.666874Z","last_seen":"2026-08-05T09:55:03.129219Z","times_seen":490,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":223,"dns":1,"connect":29,"send":0,"wait":45,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marigold-rentable.g-app-d.cc/api/is-banned","fqdn":"marigold-rentable.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: marigold-rentable.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://join-chud.fun/\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:50:53 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67OymO2EcZuFONmrEqQHAMEPWZp4tzOg6N%2Fvgi1a4FcQ7c%2BiWXqnkgpnbVpq3uFh8jDtZZyklCmarnHEXk24RXHm2p579PzbFBSgTyVfbPcaosewisAjI23QFaI%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cc0e278fb973181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-08T18:42:56.558015Z","times_seen":119051,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T03:50:52.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:50:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ve66grXg9hvPLdZYW%2BBfUd9bPIvy5d9ieoPG6x4YITU0CaIVRQgYRwLLHA457M4tibJ6RCECc34TP4beIrTJMkuCfhX3wBX6Uhez9RI%3D\"}]}\r\nage: 2790\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cc0e2719dae5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11453,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9593)","md5":"3fa2b60f8c0b19c0da4681d20bd9b148","sha1":"28bfc7ae0e025b1853cbdc38523638f19fe434e7","sha256":"ba26611d59575989d654952fd315807500cf9831d2850abebfadeea24384cf3c","sha512":"9e43c428b3af0d30456fa217ce0ca5913c9af486893f3682ae35160293d9bb20512b44feed4d2596d1d23191c10a510663f6ad23f874c72a4e816da41790b151","ssdeep":"192:65fqEOAVb40MAAqRZ7+vAtApRJxJ740EAAqRZ3MMmztMtZ:PV0VRZ6vAqdc09RZczeZ","tlshash":"6032b8f25154601a212749cf9e5a6b6f35fb307fd9b30501b7fc8b85eba9c82ed06908","first_seen":"2026-02-11T03:04:50.037862Z","last_seen":"2026-02-11T03:51:17.47406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":60,"dns":39,"connect":1,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"marigold-rentable.g-app-d.cc/_nuxt/assets/index.js","fqdn":"marigold-rentable.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: marigold-rentable.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 03:50:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Feb 2026 23:15:23 GMT\r\netag: \"698bbc0b-ac849\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xSyAOC79R7n6fm9gsR685wR9iiGoFGDkxaISt7oUnctNiiLEaaPh15R4CJ34tmTiWiS%2FcfgGnKiFMtAvUjrG35FiEEpEmie1C5VdKAiQFMZSR9Htv4dkR5or8pc%3D\"}]}\r\ncf-ray: 9cc0e274c9f63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706633,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (56629), with no line terminators","md5":"99781ba769334ba8374ea1110abcf8c5","sha1":"a8d40ee33b1c32856ce380e3b9688c546d78f1a9","sha256":"33080fe49c756f41c302f261e92d4221d6c329e667b203a8b5fb9212a2948bff","sha512":"5ef69f124fe3551a73bb80a47003b71efa32e58e158c2411bdf4a389386c8a8c6d85b7726fb3347359a673d0e2f53371a27294890b40c91e16a719b2b4eeded7","ssdeep":"12288:YYvNfx+ZmJNiGlIzjmoEfZyBZQwUEwUy/MUZUSMhOUZzHxLALVlKcs63WkhFy3uE:dN7f7MVO+Cx3BA","tlshash":"58e4a55a2285aabca5406bdc1cf11cb32d85b4cdacad487861d6dcf26133d3893b7f64","first_seen":"2026-02-11T00:48:21.229437Z","last_seen":"2026-02-11T18:54:52.168236Z","times_seen":19,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":54,"dns":37,"connect":1,"send":0,"wait":251,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"marigold-rentable.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"join-chud.fun/3d3f9ca5-d590-49b4-b231-9e395529d918.png","fqdn":"join-chud.fun","domain":"join-chud.fun","tld":"fun"},"ip":{"addr":"172.67.138.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:52.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"join-chud.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 01:15:07 GMT","end":"Tue, 12 May 2026 02:12:35 GMT"},"fingerprint":{"sha1":"39:97:C3:97:E1:66:28:12:F9:28:DB:1D:7A:AB:1E:9D:10:87:06:69","sha256":"E2:86:FD:8C:3D:82:1E:F9:8F:BE:CD:AD:0A:7F:DA:3B:57:ED:A9:E8:62:E3:14:60:53:3F:87:26:1C:C6:E4:53"}}},"request":{"raw":"GET /3d3f9ca5-d590-49b4-b231-9e395529d918.png HTTP/1.1\r\nHost: join-chud.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://join-chud.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 03:50:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 5054\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 02:11:37 GMT\r\netag: \"698be559-13be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2790\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQo82xMU6hm3hEQNIrpxpVnPtTPMynh2YESlHyzvJywTYOIyy68VMo3vPJbQE%2FwlgA4gsdv%2FsyIS5cPQZzWK5B3zYdsT0zkxHUQ2ysg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0e2746a49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 320x319, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c18a1e57d24e0f7ad263c647c15cd71c","sha1":"2a877e66812719e97b768b0442052d09fbae4901","sha256":"aaf3d6bc40f59100f574aae34c00341f1a65605c2b80ef5f5d2406c1904f9cfa","sha512":"1fab60ea9724f0f0f2d0537cd10854ce36f80885bae443a441c4621f6c75038e160631138298b31304cf5f25109b8300638c510a6408dec74b8e8717a68a39e7","ssdeep":"96:FjSmkbJz2BgI1fxI9tV/AmlIBHcYrNjgVPPtBkvQ2ejr7ZyHPuYQhz:smkbJyBVyDV4SfYrNjytBkgL4PuYQhz","tlshash":"a2a19edab9734c3101a150912e1c891f6e789c6ac2d142a09eb1db2361a5e0e7d3f3ee","first_seen":"2026-02-11T03:04:50.036899Z","last_seen":"2026-02-11T03:51:17.464741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 00:59:06 GMT\r\nexpires: Sat, 06 Feb 2027 00:59:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 442307\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-08T17:53:54.487826Z","times_seen":37274,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":272,"dns":3,"connect":32,"send":0,"wait":15,"receive":4,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://join-chud.fun/","date":"2026-02-11T03:50:53.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:25 GMT","end":"Mon, 13 Apr 2026 08:38:24 GMT"},"fingerprint":{"sha1":"85:2A:4F:97:92:1C:1E:42:29:7E:E4:FF:82:A4:86:20:AB:84:DF:1B","sha256":"17:46:D4:F0:61:C2:D0:42:C1:97:E1:BE:AB:FF:DF:09:A6:2E:C6:65:B0:FA:18:50:7C:1A:C4:80:30:31:3A:4B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://join-chud.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 00:59:06 GMT\r\nexpires: Sat, 06 Feb 2027 00:59:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 442307\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-08T17:53:54.487826Z","times_seen":37274,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":110,"dns":1,"connect":17,"send":0,"wait":16,"receive":13,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}