{"report_id":"269b4654-e8bf-4b2d-8444-0f429d7ea5cc","version":6,"status":"done","tags":[],"date":"2026-01-24T13:54:56Z","url":{"schema":"https","addr":"itthelion.xyz","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"itthelion.xyz/","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"title":"$LION Airdrop - Claim Your Tokens","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:46:40.929465Z","times_seen":17925090,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"itthelion.xyz","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:54:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"corsproxy.io","ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-18T22:04:39.131713Z","alert_count":0,"request_count":2,"received_data":3128,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-19T17:11:33.285215Z","alert_count":3,"request_count":3,"received_data":659086,"sent_data":1526,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"itthelion.xyz","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-10-16","domain_rank":0,"first_seen":"2025-11-30T16:57:02.345372Z","last_seen":"2025-11-30T16:57:02.345372Z","alert_count":0,"request_count":11,"received_data":880167,"sent_data":4951,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/redis.core.esm.js?t=29487714","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/ant-design-vue.esm.cjs.js","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"047a7d4d85baa1c6699a8a7d3a1be6a8","sha1":"fce93c4915170f28b250b4fd08d56318a2c9e03e","sha256":"d95b59bab034a8a45d2206f9f8857ebb6bced45ad52d18d8802fb08932f48753","sha512":"aea829dd6457070ae5ce122f77f5b74d5847773ad514d8ea32a38675e1bb80bb8c49d573854cb8c9b9581a96538156e1225efb2abc3c0704abe85812c496f70c","ssdeep":"6144:ouzdbYwGwP+v2dIdIDyVMEzdnGcYsrhUl7n:oMngJbgcYsrW","tlshash":"a894623e829e6036cb55aca79df5429ccfb0a42d0a632f1ab955e1c2b0d077495d33b3","size":429107,"data":"","first_seen":"2025-11-30T16:57:06.713616Z","last_seen":"2026-01-24T13:54:59.153873Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"Function","is_inline":false,"md5":"e5a719327c30c572a1f4d6342de032ba","sha1":"d9f7d0ad420986de0b03d318f1e606b6f9da01fa","sha256":"75f5d95fc787310e89db768b05babaf4845bc7bbfdc7f6504923f4ff73e39ea5","sha512":"9a5bd3a2c48a659999d97e2cb20da8455b6348add3b11083b33c83cbd4b5dc0abad687c846fad2475996953b4bcb7320d5ec60cbda991f3014fe42996a47a430","ssdeep":"3072:IEFDy25sW+Wq54KTJd7+tdXtwcVUZ5/9Pi6lsNwFNH2Hw/o+zZPGqSQKmYvoVROE:IERLDI4qBS3Stuxwt6mTDnScGsrP0PZm","tlshash":"6194753e829e6036cb55bca79df58298cf70a82d0a633f1a7955e1c2b0d077495d32b3","size":422570,"data":"","first_seen":"2025-11-30T16:57:06.72033Z","last_seen":"2026-01-24T13:54:59.16032Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/assets/index-qA_ClOES.js","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"440fdd5e4d905883955fc31497cfd6a3","sha1":"6673ef53da50f280acd11f27629c099044d15026","sha256":"60648859799a03579af6ef0044a5cda79b06c6f7226e804bc61e14bb0bd528c7","sha512":"1cb551d9a53dab3af00a090aa2fcd3a8830003fc6285416e49aab1c23bf0eee7a87da5348f69519bfdc7613464f0ab241fc593d9ae425394d88920a7433daa6b","ssdeep":"6144:ZPAG4VIsxdH2GOnmZ3byBnKg9UFwahAKY1HfcVsmUjRX:54rZ3bGnKg9UyKcHUVsN","tlshash":"94646cd8305ab175abb342b2907f411b72392913680d8420f12cedae77b5549a1bbffd","size":315122,"data":"","first_seen":"2025-11-30T16:57:06.702841Z","last_seen":"2026-01-24T13:54:59.154422Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/~flock.js","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-16T21:44:08.932191Z","times_seen":15644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://itthelion.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nlast-modified: Sat, 24 Jan 2026 13:38:30 GMT\r\nserver: cloudflare\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-cache-body-hash: cd0fcd93326a493dbfbef017045ba271\r\nx-cache-read: hit\r\nx-cache-saved: 2026-01-24T13:38:30.972Z\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 15ms\r\nx-proxy-version: 2.4.2\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -2425\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-request-id: b69ba598-2778-4508-8cc2-e3dece95255d\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BivhMXa9Grn%2BORTuXGzWNomWjSALono0mLJnam6stLXY%2BL9KhOg3qgfWyemqayeIg%2FroZ%2F2iIWHNZZp4IMvu9XzbIKN50GvwCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncf-ray: 9c3005c84b5b56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73b3f098ea8dc1a4b48f2164e498e506","sha1":"7ae65397b2629aa4d3fadf44d7d3049c2c75b22b","sha256":"3c8b28ca1c43747db3f9811649e3227b061b98c87a26e86e39ba88b4abab5a03","sha512":"85526a4235686378ed10a74e5311f0724121f51a29d6f3cb09b6605b513f61cdaa8c69752e7ecd8c7bd4104e4ae01b15965a317d360d0b223eaafc2ffdbc1455","ssdeep":"","tlshash":"01e07d803d090bbedee44e17cb1521d9d3c109585b004a8713db0d1571c965eb44b6bb","first_seen":"2026-01-24T13:38:53.763468Z","last_seen":"2026-01-24T14:20:54.583756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:25.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://itthelion.xyz/\r\nOrigin: https://itthelion.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:54:25 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/24/2026 13:54:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: da5e489f8f25c3dcd586f70e28a52912\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:46:40.929465Z","times_seen":17925090,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":91,"dns":85,"connect":1,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:54:22.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=MQeevUav9f4Z.fguZTyP8M5ZBAMnfpVVmiWsVmnrCuU-1769262863.0493717-1.0.1.1-TCXAdjo8c9HXVy8R.T8pLHyc5ouR8yCGQ4NmAcxQBIrtEoiXChKcJU8I5NCcgIIDHVrBPAWh7Nxf73Nl3OY1PfYo3sSYLbQNDEjOO8y_gVcgUmP5UWUGsUunEM4B2fXs; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"e8c23f6051a7455be1ea94e9ed5368cc\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005be0ac42efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1571,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a73538ebb7678b30aa27a5832f925961","sha1":"11acd7f21be912cb56547817e4221ba60e36f4c5","sha256":"25baaa4e13c4a95bf87cef52b0058fedb12f6fc34b19472406a66fc1c809009d","sha512":"e194e1d8504c0dfe8cce9fd903ead0967c6a7f99dd85961fc1beb6b81c9369a5ee2cc224c2a18932cb5bdb912ab46d558a8566e2683eadd2c977319287ef5591","ssdeep":"","tlshash":"ae310ed38ca0c80a6624af74acc5f504c622e643c24dad55b79d15ee0fc2fc1c6e79ac","first_seen":"2025-11-30T16:57:06.707953Z","last_seen":"2026-01-24T13:54:59.155666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":81,"dns":58,"connect":1,"send":0,"wait":325,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/ant-design-vue.esm.cjs.js","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:23.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /ant-design-vue.esm.cjs.js HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: __cf_bm=i3udsS8cThKKOiQizL00weJcejR7Qi3pw5dfO2HZqpA-1769262863.6146996-1.0.1.1-DwWud3JlU1XsHj9IAN.dAIh616T9_Q4CLmBrE.MW6hpCdwT6UWcEI_zlAHTQHDQhED5.59BQamOaT_kEMwVBTjVQyoPksNVl79Xiuwi54pCawzGYU7O10NMFImtvNIg8; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"047a7d4d85baa1c6699a8a7d3a1be6a8\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c19cb72efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429107,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"047a7d4d85baa1c6699a8a7d3a1be6a8","sha1":"fce93c4915170f28b250b4fd08d56318a2c9e03e","sha256":"d95b59bab034a8a45d2206f9f8857ebb6bced45ad52d18d8802fb08932f48753","sha512":"aea829dd6457070ae5ce122f77f5b74d5847773ad514d8ea32a38675e1bb80bb8c49d573854cb8c9b9581a96538156e1225efb2abc3c0704abe85812c496f70c","ssdeep":"6144:ouzdbYwGwP+v2dIdIDyVMEzdnGcYsrhUl7n:oMngJbgcYsrW","tlshash":"a894623e829e6036cb55aca79df5429ccfb0a42d0a632f1ab955e1c2b0d077495d33b3","first_seen":"2025-11-30T16:57:06.713616Z","last_seen":"2026-01-24T13:54:59.153873Z","times_seen":3,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/assets/lion-hero-9XSsA7wl.png","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /assets/lion-hero-9XSsA7wl.png HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:46:40.929465Z","times_seen":17925090,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/~api/analytics","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://itthelion.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: session-id=4f35f7de-2332-4a03-9162-1c5ca10b774f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"{\"timestamp\":\"2026-01-24T13:54:24.528Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"4f35f7de-2332-4a03-9162-1c5ca10b774f\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://itthelion.xyz/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:25 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=cPylMs63QkagsjUag2GQy6o7r_L3PSus1JDYpK3hRgY-1769262864.552622-1.0.1.1-.g6R8s3k7310RP93IFcS19ED4NYhwovjKHCX8hHixM6UJtsGzlCzbjku1sy6RTnRDlBdXoeoWd4wq3oElgy2AVAs1_fiNqr3WEV4QukumgII4T_w.3PwmruRPot6XPhO; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:25 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c77cf32efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-08-13T03:36:38.061723Z","times_seen":12922,"resource_available":true,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://itthelion.xyz/\r\nOrigin: https://itthelion.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:54:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJxjUbyNyxP1lQsAKuP7ISj7PUHoNC9xcFi0FF9QzNq1P3uZZpQuxCPhVbdEhzIEzCkc6CiBRFN1RcpUnmWofjB6FW1cHdPfSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9c3005c81b1b56b9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:46:40.929465Z","times_seen":17925090,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/redis.core.esm.js?t=29487714","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/redis.core.esm.js?t=29487714 HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:25 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=redis.core.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:54:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b9c568b998dfd50220023317ab63b69e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":55,"dns":38,"connect":3,"send":0,"wait":208,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/assets/index-qA_ClOES.js","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:23.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /assets/index-qA_ClOES.js HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: __cf_bm=NYyvkQEuRQHkweWZ6HCB9lUZLESmUmbVfHSd7HKDNNc-1769262863.6218998-1.0.1.1-XpG1zCY891ev.bZVsKwQGrmgU1YbHVkvGFhKPJ0GwVpiVJllmm_3o1MJday8v1Po8k.Zvq4T.FPcinL10U81D1H7.fg.KXxgz6n4EPUfWe4cmKgJSt0AMM3zcGL7mzQH; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"440fdd5e4d905883955fc31497cfd6a3\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c1acd22efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315122,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"440fdd5e4d905883955fc31497cfd6a3","sha1":"6673ef53da50f280acd11f27629c099044d15026","sha256":"60648859799a03579af6ef0044a5cda79b06c6f7226e804bc61e14bb0bd528c7","sha512":"1cb551d9a53dab3af00a090aa2fcd3a8830003fc6285416e49aab1c23bf0eee7a87da5348f69519bfdc7613464f0ab241fc593d9ae425394d88920a7433daa6b","ssdeep":"6144:ZPAG4VIsxdH2GOnmZ3byBnKg9UFwahAKY1HfcVsmUjRX:54rZ3bGnKg9UyKcHUVsN","tlshash":"94646cd8305ab175abb342b2907f411b72392913680d8420f12cedae77b5549a1bbffd","first_seen":"2025-11-30T16:57:06.702841Z","last_seen":"2026-01-24T13:54:59.154422Z","times_seen":3,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:25.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1737\r\nOrigin: https://itthelion.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1737,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 505 HTTP Version Unsupported\r\ndate: Sat, 24 Jan 2026 13:54:25 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 26\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\netag: W/\"1a-upO6eNGXiLH/etOGU8Z4TSsCvOM\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9949\r\nx-ratelimit-reset: 1769262925537\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 505\r\ncdn-cachedat: 01/24/2026 13:54:25\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2a17450119f752166a077edb142178fa\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"505","status_text":"HTTP Version Unsupported","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1d861534f29a609e5868484697373f4b","sha1":"ba93ba78d19788b1ff7ad38653c6784d2b02bce3","sha256":"eda8600220617deb22dfaeb6cfe8c1a2105750566704e7a3102489717d53f99a","sha512":"b62eb914bda78f0e733909f1bec747354cdc97209a44cb2daba63485c3481cbc7b3ee82fbcfc5a30e129ea109f804088bf28e622cc6ff8f1cd15328e3deaed3b","ssdeep":"","tlshash":"3180003c20202220200002822200022222e022b200200208802082b202000ac83af338","first_seen":"2026-01-24T13:38:56.240906Z","last_seen":"2026-08-03T12:35:27.23255Z","times_seen":213,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/secureproxy?e=ping_proxy","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=m47ZpMR_5op6oqpWtFS7qcHGvyqoidGHi3tJZ81cOX8-1769262864.0577037-1.0.1.1-2hZurHFCgmcy01YOOjpv0UCJdpg6eVRVatvZ8eO0JP48zgjcJq1U9immO2LjDFVqHqx8yuiSX2bPTLe7p1Rv2d696GrL3OI_wQ3ke5a0VMAyWZkTLKLH64UqCOwayJEh; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"e8c23f6051a7455be1ea94e9ed5368cc\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c45cbb2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1571,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a73538ebb7678b30aa27a5832f925961","sha1":"11acd7f21be912cb56547817e4221ba60e36f4c5","sha256":"25baaa4e13c4a95bf87cef52b0058fedb12f6fc34b19472406a66fc1c809009d","sha512":"e194e1d8504c0dfe8cce9fd903ead0967c6a7f99dd85961fc1beb6b81c9369a5ee2cc224c2a18932cb5bdb912ab46d558a8566e2683eadd2c977319287ef5591","ssdeep":"","tlshash":"ae310ed38ca0c80a6624af74acc5f504c622e643c24dad55b79d15ee0fc2fc1c6e79ac","first_seen":"2025-11-30T16:57:06.707953Z","last_seen":"2026-01-24T13:54:59.155666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/assets/lion-hero-9XSsA7wl.png","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /assets/lion-hero-9XSsA7wl.png HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 32275\r\netag: \"5c13dc1d0ce619c86b32faecf90b6b94\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=YqDkFPgM619wuaNtwh1MDooDccy6uY1c0fE2tSLSFBI-1769262864.2972276-1.0.1.1-R61pSUgFN4xrVRFe94x6l_m86QHpSbxf3D_5dQMBAzPJQ637cfxcUU5C4G4lcR.IAvDdBwH79JxbyMT0AU0_jA38cN_LJjYovhY6_lZrAVO9shsyo_o1I6LsNQ1bXngY; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:24 GMT\r\nserver: cloudflare\r\ncf-ray: 9c3005c5d8b62efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32275,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"5c13dc1d0ce619c86b32faecf90b6b94","sha1":"439433ba06ce573ea2ac279a91e3dc250b07906e","sha256":"d97838339e7a4bd161d708882133b2eedf97761a3867e044c60a0783b88e50c8","sha512":"b9d03dfd9177f976d2ca753e617f0f9754e8358b04377d5ae085bebc09524975592c5007f84e41949cc1d415008996d40db37b404e0e6e881fd551441f64b4ad","ssdeep":"768:GdZr87vIIpJNr1fx7WNIj5KM+W2+lhzNV0TdqueEIf8ypGa4kis:GdR8bIENr1fsNwKn+lhzNKdXwpG+","tlshash":"56e2e10786e0da176717daf8bd036f0e1831b754f883f26218d3fd22da50d6ad82646b","first_seen":"2025-11-30T16:57:06.710248Z","last_seen":"2026-01-24T13:54:59.159592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/favicon.ico","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:24 GMT\r\ncontent-type: image/x-icon\r\nset-cookie: __cf_bm=nvg5kLdT_yfIqINg6wJl8MRB7_VMtLkYenKevNqWFiI-1769262864.4277964-1.0.1.1-Pr.Hv.N_K_fkVGJFCOisZYrbtohHGpl8_8aZSq8zDSganvqKJxdtTbaEzX_jt44P4srpkSVyy7vHXwPZgYT8osK0FDqp0LFkpIIE2__JMeUuSZUfcUquH7D4EXtKFIZJ; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"566e64364d6957715dc11845f4800700\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c6aad82efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7645,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 73 x 74, 8-bit/color RGBA, non-interlaced","md5":"566e64364d6957715dc11845f4800700","sha1":"db98fcaaf06be921ed2b8f25ac80f0add9f4a787","sha256":"29a40d56580a5366083461297773dbf146ec043d1156f432f5472cb3487f506b","sha512":"d93824f3088a249625d0bbb64a99d1e320aa4e375ceea0205c961de73d04c635c97a7788865260e3ca13aba38a8dd95435f2183869f17a41afd4ee7d9364bc74","ssdeep":"192:NUNBikqtkfu6b+DkwFy3/0sRmz4fL5AHtHyhaFg63/:uNkkdfakwFy3/Xk6lepy6P","tlshash":"40f19e9f7f833802d90c95bf5492c75189c9d5551558c23fb0fd6132acaf5d3629f085","first_seen":"2025-05-20T14:46:56.545075Z","last_seen":"2026-08-16T21:35:02.737592Z","times_seen":1904,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fredis.core.esm.js\u0026t=29487714","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:24.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fredis.core.esm.js\u0026t=29487714 HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=Q217iLLULDeG92VRoqY9iyHcpRNC4r55SLpUQbD_JMM-1769262864.4765332-1.0.1.1-cDhbVhQlWryrJj3Wl.JtpKUikFoWBlU_rCkLiwc2rzwvYaT.UztLWgeDSP_dn4aDLK4YfaH8gYsh2eKedcmo2DWtKNLRItYykpUOwOBuvWKI3vKk2D.vsUklEo2Jc7cJ; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"e8c23f6051a7455be1ea94e9ed5368cc\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c6fbab2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T21:46:40.929465Z","times_seen":17925090,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/~flock.js","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:23.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=ykz12RO3wWkc.jhizbXWBSVgD.2eKpVQN2r9.32rJ24-1769262863.6332147-1.0.1.1-xxCMRmUtLUkRzUFQ8yarSmxktxohO0COCtiinLov7a3pgaXs1ab_vvVORnxd1r.W2Mc46mw2hSTyKVTIGG0adN.p6_q5v4nkFaX6lG2u3meWvWOIljz4WE50kEKg7VFi; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:23 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c1bd182efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-08-16T21:44:08.932191Z","times_seen":15644,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"itthelion.xyz/assets/index-BM5p5Zba.css","fqdn":"itthelion.xyz","domain":"itthelion.xyz","tld":"xyz"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://itthelion.xyz/","date":"2026-01-24T13:54:23.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"itthelion.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 22:28:17 GMT","end":"Sat, 14 Mar 2026 23:28:12 GMT"},"fingerprint":{"sha1":"2A:CC:91:E6:09:B3:CB:2A:BA:51:F8:7B:86:B7:86:0C:80:60:02:D3","sha256":"26:94:1B:15:8E:FA:11:74:7D:28:A7:EA:1F:52:72:62:25:6E:60:BE:32:01:70:50:33:CA:1B:01:AB:BA:10:F4"}}},"request":{"raw":"GET /assets/index-BM5p5Zba.css HTTP/1.1\r\nHost: itthelion.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://itthelion.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:54:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\nset-cookie: __cf_bm=yY5C0QpDvJcH2_pZcmpUFdmaBZJxi2ZsLwiUCamnWyg-1769262863.6279252-1.0.1.1-0ZUK7OEoYYO6xzlhK6Q3is6cXafYsITgHVA1_Oaw6o21BtuqOwWHDhh8_8lmch7cBOYwT1vKl8b5Zs6GYtj4dMvirzIJqFtQE5BufpQvCcXyrVbDNL0ttfOVqmBhPcG.; HttpOnly; Secure; Path=/; Domain=lovable.app; Expires=Sat, 24 Jan 2026 14:24:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\netag: W/\"f0d1831604d7940390761bc2c526a114\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c3005c1ad012efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64568,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (64567)","md5":"f0d1831604d7940390761bc2c526a114","sha1":"719247de4bd159277d67c8479b3c229f012ff8d5","sha256":"69e7dc5d6d9b818f6fadbbdb383effb887c9cfa992be65d91f71a332ce273934","sha512":"4d226069792222899d3841431ef5733138b1b0ddd25fcb0a76042e39f90d1803040ff992d6c38c32717817820df9fc851516988e353c4c3124e284ce97ec41bc","ssdeep":"1536:ppghoSYLkz68U8aGyCr378VQZkt5FNCo7u:ppghoVkTU8aGyCr378VQZkt5Ff7u","tlshash":"2c536319b519a17e3c2791e883ccb9ec610af0c0dd3b06b5be9a41212bd37f61dbb558","first_seen":"2025-11-30T16:57:06.705466Z","last_seen":"2026-01-24T13:54:59.152642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}