{"report_id":"24213768-b856-41ff-b689-1f2e6893f91f","version":6,"status":"done","tags":[],"date":"2026-01-09T01:08:26Z","url":{"schema":"http","addr":"api.noocuwio.sa.com/dzzHgmU!","fqdn":"api.noocuwio.sa.com","domain":"noocuwio.sa.com","tld":"sa.com"},"ip":{"addr":"104.21.7.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"api.noocuwio.sa.com/dzzHgmU!","fqdn":"api.noocuwio.sa.com","domain":"noocuwio.sa.com","tld":"sa.com"},"title":"Finquick – Finance \u0026 Payment SaaS Landing (HTML)","dom":{"size":10455,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"fd3931a845993d7379bbc48a6150d82f","sha1":"4d81a77483d38425acfc9b8e0c277292f012422c","sha256":"5a101215ba7d73cae6227c75199248e5355c48d9a2388f566b1cfce3a42a662b","sha512":"c04ecb61be4e8af1ef1831c66c130b91431eeccd443598bb35d53d219f06d890d2a689c6c5d61ba4fad89d620df2c2bf7ed0db5e53fb57e2d8190baf4183afed","ssdeep":"192:hRYpgE/hwoOIkfCjSuv5bkunaP3wV6x5bpOhsz23yILSeH2Q4Uvdd5+JwF2:hRkARfyXKFomCsaJvHV5+JwF2","tlshash":"c922a3321060b0372953a5c6faa1238fb5f1e517dd270a54bafc52988fdbed2ce8b505","dom_hash":"domhash24db3cf8315b87698e6be549b566943d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"api.noocuwio.sa.com/dzzHgmU!","fqdn":"api.noocuwio.sa.com","domain":"noocuwio.sa.com","tld":"sa.com"},"ip":{"addr":"104.21.7.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T01:08:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-08","alert":"Phishing Block","trigger":"api.noocuwio.sa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":4921,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-01-06T12:07:53.255113Z","alert_count":0,"request_count":3,"received_data":74882,"sent_data":1494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":4,"received_data":131768,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.noocuwio.sa.com","ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2026-01-08T18:02:44.120988Z","last_seen":"2026-01-08T18:02:44.120988Z","alert_count":8,"request_count":2,"received_data":27585,"sent_data":1672,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.noocuwio.sa.com/dzzHgmU!","fqdn":"api.noocuwio.sa.com","domain":"noocuwio.sa.com","tld":"sa.com"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"68a0a88f891c8721b6095a6b18e62338","sha1":"f9d0473a3c5fc385cdffd9579c04e20ab6cf4a2d","sha256":"98a7526dd15de558fc5a35180672f5349a63f77f81f2e5caf7d30f010c8cf4e3","sha512":"eb7c48fc8631a9d4a6020e380e8debebe47b839da148b94ef3ed2e3e5dc703443f534a224378dff7747a1609bf65c7f28d75306e1e377750c61d7769b3a8aec8","ssdeep":"","tlshash":"00a0220332ac082a088e20a302a0b28c222080003cc2c0302c0c0208c080f03023c2c0","size":65,"data":"","first_seen":"2025-08-26T22:53:02.284343Z","last_seen":"2026-04-28T17:58:03.464484Z","times_seen":1448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:04.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Outfit:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.noocuwio.sa.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Jan 2026 01:08:04 GMT\r\ndate: Fri, 09 Jan 2026 01:08:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4235,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"08b996b4c9404c9a9271a10b420ef087","sha1":"0efcd7a3b48bd59ccd3b725c3acc87ab4e348e21","sha256":"1217c40f1db31abe2a0c1dd3fc867e3a5d70ee8bf517c86ee32cd050352ab776","sha512":"efea7f7c647da87ba955dd3e28b97ce4b83d2ba7175000076d112e61e1b12edb7031e56405eb31708249f7539a1a33b5b422d49973d829aa7b837698e73a1983","ssdeep":"96:cOEaRJc+uwOEaKNNOXaRJc+uwOXaKNNOxMaRJc+uwOxMaKNNOpaRJc+uwOpaKNNT:zh6OhprhwEhXxhWV","tlshash":"dd91dca1082ba144df970cc222ce7e33ef5f62516444d934affe1899ac6bd5a835770d","first_seen":"2025-10-04T01:43:15.350501Z","last_seen":"2026-05-22T12:59:04.141135Z","times_seen":526,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":174,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1605902711622-cfb43c4437b5?q=80\u0026w=1460\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1605902711622-cfb43c4437b5?q=80\u0026w=1460\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.noocuwio.sa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 11c9ecd7ca5eff427ffb4f75f1d924982d032c3c\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 21 Dec 2025 04:26:01 GMT\r\nserver: imgix\r\ndate: Fri, 09 Jan 2026 01:08:04 GMT\r\nage: 1629723\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220163-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 73082\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":73082,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"84afc47be3258294e0906f63cd25e8b5","sha1":"db673f3b7154a4d5bf5289527dde03fecc54a499","sha256":"abce7c51bc653b23834fc9a49cdca4293ec4e3c08bf19f333401c0b83237d966","sha512":"b04dc2d04bbabd1099b9aeda66ef2945743612c66de3c83bcd590dd5885aa06fce4d67b9f08ebc343b4aeac9bbfcc5e306685420e2f1572653830c97015f5392","ssdeep":"1536:cL39+bcgEQ2JRlYzTwyveqkqCTgRcCdy976pvZKUu6VoiAyBNw:cL39+bcvFmvemcCvRVpAiNw","tlshash":"7c630213cc874fcecb2d6378c8e0bb4635376beea363656de24478967a04c851489b0e","first_seen":"2025-12-11T04:00:07.970708Z","last_seen":"2026-02-15T08:18:04.501355Z","times_seen":205,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":14,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:05.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.noocuwio.sa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Jan 2026 16:32:12 GMT\r\nexpires: Fri, 08 Jan 2027 16:32:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 30953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-05-23T16:19:10.745638Z","times_seen":15527,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":143,"dns":1,"connect":7,"send":0,"wait":8,"receive":8,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:05.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.noocuwio.sa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Jan 2026 16:32:12 GMT\r\nexpires: Fri, 08 Jan 2027 16:32:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 30953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-05-23T16:19:10.745638Z","times_seen":15527,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":140,"dns":1,"connect":8,"send":0,"wait":15,"receive":3,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.noocuwio.sa.com/dzzHgmU!","fqdn":"api.noocuwio.sa.com","domain":"noocuwio.sa.com","tld":"sa.com"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T01:08:04.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noocuwio.sa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 22:28:06 GMT","end":"Sat, 07 Mar 2026 23:26:40 GMT"},"fingerprint":{"sha1":"C2:93:34:41:F2:A2:5D:3B:E5:E0:8E:43:DF:B6:93:89:3B:93:8E:0D","sha256":"E3:AB:86:13:6C:6E:3D:AB:A5:15:25:7F:00:81:1A:BE:B4:2B:38:E0:87:D5:48:7E:01:AD:54:D1:12:C9:37:7A"}}},"request":{"raw":"GET /dzzHgmU! HTTP/1.1\r\nHost: api.noocuwio.sa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 09 Jan 2026 01:08:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tS11Aec68hyDbxTI8u3pY6WVs6L6x%2BjW6Bb449efQeFGX41Y3vCezcsmFPl1B2NIFS3z539yCjTlLJgXSsFY%2BT3c%2BWRG8lVJuw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkdIUVlEZi8xWGo1Y2xMK3owallMb0E9PSIsInZhbHVlIjoiMUo1TmNuRkFlRWV5TW9jQVNoMjU2eTJGMU45VXFDd3hOSE1qVER5b0p1L2RFd055bmMxdklkaUEzRlQ3YVR6TnJObFpIaTdsZHRMZTE2eXVhbTBCR3VHRzRWS3p2UmlHck42UHVEeko0K2tUYWJLT1ZIOTNRbHVFdHRqYkRqSGciLCJtYWMiOiJlMWE1ZDFhNDhiM2M1M2NmMzdiZjZhMGQzNmQ0OTRjNTY1ZjM4YjJlMDk3MDdiNDUzMDA0MGUxODEzOWZiYWMwIiwidGFnIjoiIn0%3D; expires=Fri, 09-Jan-2026 03:08:04 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6InpldlBDaHFQZDFFQ1M4QTFDTU9ZbUE9PSIsInZhbHVlIjoiN0VwNE9uTVUxd1ZiUXd6L2k5OGdDNmpGUXFXUzJiQVlmdzFGN0xsVXduNGIyNDFEc1pxVjU5anpkN0VZSzVDQUtIZVp0bXlGcWFJZndCK3A5VTFqU3VDcHRSVy83M3JqUUZ4cHVZRW1UTnFRcHN3NjViTExwQmJqSVlvN1pFM28iLCJtYWMiOiIwNjBhNDIzMjMxMjBiMDBkNjRiODliNzY0NGRmMjY2MGY1YWRiMWI0NDE4ZDU2YTZiZTJhOTQ1MjZmOGMwNGRlIiwidGFnIjoiIn0%3D; expires=Fri, 09-Jan-2026 03:08:04 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9bb00a95695ab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"58a2067b843dc9dc4c3a0640e2bf4efc","sha1":"4c39aa8399a7a6667f87850e66e01912e6a2ae63","sha256":"57e10a4e3a99bbe2c4b6679f89452e7e1da6aa875aa5c7ecfce502b8012a9eca","sha512":"c0a7abb8bd29d86b0392e06821825fc2e6ddc8700f97ff8ffe29f0593b5d13b4e41cfee07ad4220867f5721f9bd8d2e38af8e17ebda27b205f11eb3cc12d4bd8","ssdeep":"192:fvNpgEthwoOIkfCjSuv5bkunaP3wV6xLbKXhsz23bSeH2Q4Uvdd5+JwnU:X7SRfyXKFoPRsaLvHV5+JwnU","tlshash":"0f22b4321060b0372963a5c6faa1234fb5f1e517dd270a54bafd52988fcbec1ce9b505","first_seen":"2025-10-31T22:38:13.409821Z","last_seen":"2026-02-17T03:30:40.122356Z","times_seen":4519,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":45,"dns":15,"connect":1,"send":0,"wait":508,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-08","alert":"Phishing Block","trigger":"api.noocuwio.sa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1612832021038-0c95d7be6a43?q=80\u0026w=1600\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1612832021038-0c95d7be6a43?q=80\u0026w=1600\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.noocuwio.sa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-imgix-id: d5b0b4af3e1c1ee361d27d9ffc43a3f072315867\r\ncache-control: public, max-age=300\r\nserver: imgix\r\ndate: Fri, 09 Jan 2026 01:08:04 GMT\r\nage: 55\r\naccept-ranges: bytes\r\ncontent-type: text/html,text/html\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220150-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 29\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T18:07:57.937252Z","times_seen":15620960,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1601597111507-6b95d6a3f7e9?q=80\u0026w=1460\u0026auto=format\u0026fit=crop","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:04.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1601597111507-6b95d6a3f7e9?q=80\u0026w=1460\u0026auto=format\u0026fit=crop HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.noocuwio.sa.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nx-imgix-id: 9cd78c3a33227a21199a98f709f3e7de4c81e14d\r\ncache-control: public, max-age=300\r\nserver: imgix\r\ndate: Fri, 09 Jan 2026 01:08:04 GMT\r\nage: 55\r\naccept-ranges: bytes\r\ncontent-type: text/html,text/html\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220082-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 29\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T18:07:57.937252Z","times_seen":15620960,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":32,"dns":1,"connect":13,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:05.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.noocuwio.sa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Jan 2026 16:32:12 GMT\r\nexpires: Fri, 08 Jan 2027 16:32:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 30953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-05-23T16:19:10.745638Z","times_seen":15527,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":221,"dns":3,"connect":7,"send":0,"wait":8,"receive":3,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:05.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.noocuwio.sa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Jan 2026 16:32:12 GMT\r\nexpires: Fri, 08 Jan 2027 16:32:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nage: 30953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-05-23T16:19:10.745638Z","times_seen":15527,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.noocuwio.sa.com/favicon.ico","fqdn":"api.noocuwio.sa.com","domain":"noocuwio.sa.com","tld":"sa.com"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.noocuwio.sa.com/dzzHgmU!","date":"2026-01-09T01:08:05.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noocuwio.sa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Dec 2025 22:28:06 GMT","end":"Sat, 07 Mar 2026 23:26:40 GMT"},"fingerprint":{"sha1":"C2:93:34:41:F2:A2:5D:3B:E5:E0:8E:43:DF:B6:93:89:3B:93:8E:0D","sha256":"E3:AB:86:13:6C:6E:3D:AB:A5:15:25:7F:00:81:1A:BE:B4:2B:38:E0:87:D5:48:7E:01:AD:54:D1:12:C9:37:7A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: api.noocuwio.sa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.noocuwio.sa.com/dzzHgmU!\r\nCookie: XSRF-TOKEN=eyJpdiI6IkdIUVlEZi8xWGo1Y2xMK3owallMb0E9PSIsInZhbHVlIjoiMUo1TmNuRkFlRWV5TW9jQVNoMjU2eTJGMU45VXFDd3hOSE1qVER5b0p1L2RFd055bmMxdklkaUEzRlQ3YVR6TnJObFpIaTdsZHRMZTE2eXVhbTBCR3VHRzRWS3p2UmlHck42UHVEeko0K2tUYWJLT1ZIOTNRbHVFdHRqYkRqSGciLCJtYWMiOiJlMWE1ZDFhNDhiM2M1M2NmMzdiZjZhMGQzNmQ0OTRjNTY1ZjM4YjJlMDk3MDdiNDUzMDA0MGUxODEzOWZiYWMwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpldlBDaHFQZDFFQ1M4QTFDTU9ZbUE9PSIsInZhbHVlIjoiN0VwNE9uTVUxd1ZiUXd6L2k5OGdDNmpGUXFXUzJiQVlmdzFGN0xsVXduNGIyNDFEc1pxVjU5anpkN0VZSzVDQUtIZVp0bXlGcWFJZndCK3A5VTFqU3VDcHRSVy83M3JqUUZ4cHVZRW1UTnFRcHN3NjViTExwQmJqSVlvN1pFM28iLCJtYWMiOiIwNjBhNDIzMjMxMjBiMDBkNjRiODliNzY0NGRmMjY2MGY1YWRiMWI0NDE4ZDU2YTZiZTJhOTQ1MjZmOGMwNGRlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 09 Jan 2026 01:08:05 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ddoOvMgXHAIE5To2yJp9VOMH5B4K5IoClyrI7S%2FfF2MtX0HAwwuFg712Ib7VxP7pViuIyiC9Il5fNNw7j27ghnPdcQVcxULptw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkRQOXByM3ptVi8vSEFVUUY1dHJ3Qmc9PSIsInZhbHVlIjoiSmlSejZjUVlPM0hMcTE0UGVUUEhGaW5Xd1B3TlhOQlkrazFsZFlwUjROVnZkaW9ha2g1UlBwZjlXTzRueG12OEFGK2VLTytkWXZ6WDBkR29OUGR5Y2JLQ2VMaUgvMXVmU3FZOFVoaUJudGdiT3JDREZCWlBHbk1SVnpVbE55TksiLCJtYWMiOiIyNjQwYmUyNDY4ZjliMzQ1YmM4ZTE4NDQwYzY1YmJiZTkwOWFiZmRlODY3MTExNjRkMWVkNDFhMmE0ODAzZTM2IiwidGFnIjoiIn0%3D; expires=Fri, 09-Jan-2026 03:08:05 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IlhUQ3p1WE9oYkk5SFZMZ2RBY0ZoNFE9PSIsInZhbHVlIjoidkF3UUxQc2ZvSnU2SGs1Z2NocVJOdEJ5M0ZwVVVWdDFUbWFkK2dsckhUaytTajNmNE9XTUpvdFd1MzBLY1pDaC91NXFzaDYyaUh2Nm43Nk1CbEVVOUJiN1M1K2lQRTFja1pXWFhXdFY3c3RaUWlvdmdaeDJlb2xuWEs0MWdyYmMiLCJtYWMiOiJkNTM4MDk0NDhkZTYxYTk3OTI5NTI1OGRmMTQzOGU4ODg2M2U4ZDk3NDgwNjE5NmE2NTBmMzkwYjA0ZDRiOTA2IiwidGFnIjoiIn0%3D; expires=Fri, 09-Jan-2026 03:08:05 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9bb00a9d3c312678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (377)","md5":"78205d9016de2e597479f4d2afa2553d","sha1":"403cf36d2420d8069dcf3f6d496cd65e762606b0","sha256":"0f119d5572942fd873942e793d2fecad09a1e559d12896534f021e4e6fab2fa4","sha512":"6e97ae8e87b621afa58c2befad09dbaa1b750adf8e6a4b9fa873e0a6f7e123daae0c00fc07a57b33bf3d884a887518e2dcb4c22cc2469cb1fd2a106b3bb34d89","ssdeep":"384:PRaGboRKozZd9qBpKJSmf0l+uC1CmSBzA:BboRBr986f0l+11/28","tlshash":"9852613250a0743b2923e4c6aa61574f79f1e51bdd270640b6fca2e44fd3dd2cea7609","first_seen":"2025-11-01T06:14:30.995109Z","last_seen":"2026-02-17T07:18:09.17602Z","times_seen":4555,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"api.noocuwio.sa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-08","alert":"Phishing Block","trigger":"api.noocuwio.sa.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}