{"report_id":"276074b8-f503-4b67-aa86-3f6f1518fb4e","version":6,"status":"done","tags":[],"date":"2026-01-08T06:20:41Z","url":{"schema":"http","addr":"thugtoner.com/","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"thugtoner.com/","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"title":"ThugToner.com | Promo","dom":{"size":3315,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (898)","md5":"828c0fff6950b4ff9c305007b0650953","sha1":"18f5cc3add1be1e665ca7ef46a0788d5c258b251","sha256":"280f6be1c0cd643ded2290edc0af0c662e5a70ad82d771ff7da8c371b18cf53b","sha512":"d345ae1c3dc72b3bb8e4318f04c69376ac63bc2316453a6b4e8943f081792b9b49278f0995add8a470b0c2a2b77c5c1ccc461bdd87140b0a99ffe02a3949f1ac","ssdeep":"","tlshash":"526113e786d0927a03f242c520ebf3a77dd5800bc798610076fd05f44fe9e64b4a754a","dom_hash":"domhashcc561495518c408cbdd3204d2c81f74d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thugtoner.com/","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T06:20:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-08T06:20:19Z","timestamp":1767853219,"ip_dst":{"addr":"20.48.204.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"ip_src":{"addr":"Client IP","port":56066,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI","source":"{\"timestamp\":\"2026-01-08T06:20:19.936759+0000\",\"flow_id\":2026819975062298,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.32\",\"src_port\":56066,\"dest_ip\":\"20.48.204.9\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2063118,\"rev\":1,\"signature\":\"ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2025_06_20\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1102\"],\"mitre_technique_name\":[\"Web_Service\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2025_06_20\"]}},\"tls\":{\"sni\":\"ddkvp.azurewebsites.net\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":925,\"bytes_toclient\":6768,\"start\":\"2026-01-08T06:20:19.729882+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"thugtoner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"thugtoner.com","ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-08T06:20:41.370367Z","last_seen":"2026-01-08T06:20:41.370367Z","alert_count":3,"request_count":3,"received_data":1741330,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"ddkvp.azurewebsites.net","ip":{"addr":"20.48.204.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"domain_registered":"2012-01-24","domain_rank":0,"first_seen":"2026-01-08T06:20:41.374336Z","last_seen":"2026-01-08T06:20:41.374336Z","alert_count":0,"request_count":1,"received_data":2298,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"dorkydomains.com","ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2023-02-07","domain_rank":0,"first_seen":"2026-01-08T06:20:41.371942Z","last_seen":"2026-01-08T06:20:41.371942Z","alert_count":0,"request_count":2,"received_data":11102,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":46149,"sent_data":1060,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":4220,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.dorkydomains.com","ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2023-02-07","domain_rank":0,"first_seen":"2026-01-08T06:20:41.372909Z","last_seen":"2026-01-08T06:20:41.372909Z","alert_count":0,"request_count":2,"received_data":10752,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.dorkydomains.com/shared/scriptfile2.js","fqdn":"www.dorkydomains.com","domain":"dorkydomains.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3b8623845bf1029eefb14a1337d0b1f","sha1":"99fe09be624ac1e3da91477f0485d9c34df993e7","sha256":"347756ae6ff00908154e6d32679e0c5baf035a5bf161ecda649142ca22762484","sha512":"66b50226796f2f80682646fcc1bd12d9c5291355cc0e0222f22eb1a1b6e378426ac4c8b12f82d0fa71967bc1754d33846400eae5251e3b5fd3caaa5f8d9bfc68","ssdeep":"192:lVqwUcoenMngt2TsryX/ii/iVzfTSQOmTGuMM3bf8eiHi36LVlbCLVNGpi8bB:lroK8g24QiMiFPTJMr","tlshash":"71d134477df32d30878b789e96cb510931267007a629d909791dce902fe277492bbbdc","size":6427,"data":"","first_seen":"2026-01-08T06:20:46.120605Z","last_seen":"2026-01-08T06:20:46.120605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thugtoner.com/","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"93f52035443459739d87b4ae95836fca","sha1":"d401ce9a122d033d1a95d6a2405d393ec47bd339","sha256":"446762347af3e9295e1e9f3aad8d4f7ba5180bf67617a6b0febcdfbe0154d794","sha512":"b0be51bbe61020a55f1872a96ed87541501abb2b87d889cc0d1108b1099006c50a10409eff30ba50a0a527655a5d34556cdf3b80bc5cf559fbc0fc402d4f3e73","ssdeep":"","tlshash":"2d5000000c0003000000c00c03030003000000000000c000000000000003003c030000","size":8,"data":"","first_seen":"2025-10-29T17:34:14.413551Z","last_seen":"2026-05-12T06:06:20.33984Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thugtoner.com/","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2a0bd636d997c4a1d19bae59456977a","sha1":"632d06ecae87a405fa40504a1b9e1bfdd843ef6f","sha256":"e8121815a03c9bb23a6a57ccd704bf64f0d56710ad777c1d7b0d1ac463cc70c0","sha512":"982bdb67d44ac8b6bf206f41acd87febef2ef08236d2f348557c1806a048265d193ca818827f79cb2c8d6f965ecaaf1f2f8e7790d9d27c89b9f43b4a22544ec0","ssdeep":"","tlshash":"cea0129a06222251818074c0d2436704f7120005dc10f1c2740c6d57874a8c1508549c","size":86,"data":"","first_seen":"2026-01-08T06:20:46.124164Z","last_seen":"2026-01-08T06:20:46.124164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kalam/v18/YA9dr0Wd4kDdMthROCc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:19.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/kalam/v18/YA9dr0Wd4kDdMthROCc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thugtoner.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22336\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 12:39:33 GMT\r\nexpires: Thu, 07 Jan 2027 12:39:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 63646\r\nlast-modified: Wed, 10 Sep 2025 16:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22336, version 1.0","md5":"0a6a7f663878d4436b8996e7cc0fe160","sha1":"a0b26053cd9cb515dafc8c6e20715d991189f8ab","sha256":"954410601a823f37e219f7930b7446f86afa15621326a7078d56fb9c910135cb","sha512":"d599a886ee0b3d7265c72e829f17efdabe6b0a476a0ff12da794e27548c2f397127e4956e4225e9333915471752db0974e04384d5b4cb228ac4ba3c29820fb4e","ssdeep":"384:A2+FY9nGQK22/bS9xer31E+A+OXp84ir3D8Rj+Waple9tjQBgB2skqAFwNOoH6D:1+O9GL2CSHG1hAhZy3g1Mpk93BtswNX8","tlshash":"31a2e173cb7d2a1fbf9d5a286a464f3359b23e5047128ccaca96518644cd84e7b1fe08","first_seen":"2023-04-10T11:34:36Z","last_seen":"2026-07-21T21:54:58.542501Z","times_seen":653,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":90,"dns":1,"connect":20,"send":0,"wait":22,"receive":6,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kalam:wght@300;400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:18.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Kalam:wght@300;400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thugtoner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Jan 2026 06:20:18 GMT\r\ndate: Thu, 08 Jan 2026 06:20:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3534,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3206f7f20a5178a7122595baea4dac04","sha1":"deedaebcf1ef56ae4899b0c6aac7262eeb765929","sha256":"9af5a40743b45320c99d1d255e4da38464a743fb892bacadeb38d247d82fd340","sha512":"bff894561339f3ed2063e5daae2506d3105f4e10a403f0bb7e6c6f4ad07310756fe6024f904b4bec016e02f8521dd870b4e2421bc173903fcf7aafe5859b9137","ssdeep":"","tlshash":"54710082042b9104db971cc1a2ce7e36ff0e2261a444c575abfe0cc8ad9fda99361f5d","first_seen":"2025-10-04T16:29:02.149356Z","last_seen":"2026-07-17T14:53:12.90306Z","times_seen":132,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":63,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dorkydomains.com/shared/stylefile2.css","fqdn":"www.dorkydomains.com","domain":"dorkydomains.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:18.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorkydomains.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 01:47:09 GMT","end":"Fri, 20 Mar 2026 01:47:08 GMT"},"fingerprint":{"sha1":"50:22:7E:6A:33:44:56:F2:3C:EA:B5:1E:1C:1D:E1:95:3F:09:1F:6C","sha256":"82:3B:0A:F3:9D:A8:DC:CE:A7:CD:54:6B:77:E5:05:C6:33:91:23:19:ED:63:6E:5C:6B:3E:9E:AD:38:12:7C:AD"}}},"request":{"raw":"GET /shared/stylefile2.css HTTP/1.1\r\nHost: www.dorkydomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thugtoner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: GitHub.com\r\ncontent-type: text/html\r\nx-origin-cache: HIT\r\nlocation: https://dorkydomains.com/shared/stylefile2.css\r\nx-github-request-id: 9EF0:10F2EF:C7DD8A:CB1287:695F4CA2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 06:20:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853219.990337,VS0,VE118\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 60efd5ce657223c4597d3dde20f63d01bf2d0a7a\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":3281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T23:24:28.748346Z","times_seen":17434361,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":157,"dns":124,"connect":13,"send":0,"wait":132,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thugtoner.com/index/banner.png","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:18.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thugtoner.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 21:06:04 GMT","end":"Sat, 07 Feb 2026 21:06:03 GMT"},"fingerprint":{"sha1":"A7:2F:3C:FE:89:F3:17:59:73:0C:28:4A:F7:69:0E:A0:3D:66:6C:8B","sha256":"4C:00:D3:7A:D7:82:69:24:27:CF:38:62:29:D5:A9:04:E3:46:FF:AC:F0:03:C5:84:C8:0F:ED:01:95:FD:02:65"}}},"request":{"raw":"GET /index/banner.png HTTP/1.1\r\nHost: thugtoner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thugtoner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sun, 09 Nov 2025 23:19:17 GMT\r\naccess-control-allow-origin: *\r\netag: \"69112175-1a5d7f\"\r\nexpires: Thu, 08 Jan 2026 06:30:18 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 55A6:2C5782:CEAA1E:D1D9A2:695F4CA2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 06:20:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853219.844915,VS0,VE297\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7f9a7f9ffe90a753a2ccce0b5e3c83fe81aec07c\r\ncontent-length: 1727871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":1727871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1301 x 780, 8-bit/color RGBA, non-interlaced","md5":"a1080b25b5d8dd09f0e5f390ee338720","sha1":"1900c8f34f452687891e7e2f8b276b9ee5bbb642","sha256":"bdfa858fa93dd10a7c70d5cf8b127d3444d609619c50e335b8008937933ebc14","sha512":"475216e64a096de65cc91006d74d952e1e9f2938734e8d19f9cf281f9fdfd12dc858b1e87a543b0a12917ebc27f44269f5f07e6e65e2ab813b0a96905cd8f07d","ssdeep":"24576:Pm6ff/BxtIwDBaJnmtT3XO/c6KQ3xtgKgFdhdm2/bs61ADM:/f37imtLX6/3x2Ld1bs6KM","tlshash":"d5253365959037b9e88166d33c68e9afbffef305187cca2f9917d48e50ece490582381","first_seen":"2026-01-08T06:20:46.115083Z","last_seen":"2026-01-08T06:20:46.115083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"thugtoner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"thugtoner.com/favicon.ico","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:19.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thugtoner.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 21:06:04 GMT","end":"Sat, 07 Feb 2026 21:06:03 GMT"},"fingerprint":{"sha1":"A7:2F:3C:FE:89:F3:17:59:73:0C:28:4A:F7:69:0E:A0:3D:66:6C:8B","sha256":"4C:00:D3:7A:D7:82:69:24:27:CF:38:62:29:D5:A9:04:E3:46:FF:AC:F0:03:C5:84:C8:0F:ED:01:95:FD:02:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: thugtoner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thugtoner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\netag: W/\"64d39a40-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1B0E:18F25B:CBFF6D:CF36E1:695F4CA3\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 06:20:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853220.586160,VS0,VE121\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 561ca408145cb476aaf2e4810bf7a886603f9bc0\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-07-21T22:57:39.073111Z","times_seen":18588,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"thugtoner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddkvp.azurewebsites.net/api/hub/thugtoner/index","fqdn":"ddkvp.azurewebsites.net","domain":"ddkvp.azurewebsites.net","tld":"azurewebsites.net"},"ip":{"addr":"20.48.204.9","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:19.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.azurewebsites.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 08","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 01 Dec 2025 19:10:55 GMT","end":"Tue, 25 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:59:35:83:20:37:E4:07:CA:4B:05:B6:4F:AC:9A:E7:4D:48:37:20","sha256":"3D:FC:84:90:C4:F7:4B:3E:91:89:FC:A9:3F:E4:0E:19:1F:76:95:19:C4:CC:FE:15:BE:E6:04:6D:E2:51:EE:E6"}}},"request":{"raw":"GET /api/hub/thugtoner/index HTTP/1.1\r\nHost: ddkvp.azurewebsites.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thugtoner.com/\r\nOrigin: https://thugtoner.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nDate: Thu, 08 Jan 2026 06:20:20 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nSet-Cookie: ARRAffinity=79e06db539acb57119e709978d2cf1da299e8341753d6f6345007fcab3f69bc5;Path=/;HttpOnly;Secure;Domain=ddkvp.azurewebsites.net\nARRAffinitySameSite=79e06db539acb57119e709978d2cf1da299e8341753d6f6345007fcab3f69bc5;Path=/;HttpOnly;SameSite=None;Secure;Domain=ddkvp.azurewebsites.net\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=2592000\r\nX-Powered-By: ASP.NET\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1711,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e1bf717a4525fde1a4ebdb7f1025408","sha1":"2d6a0b6c8429897f95abe74acde16b84b4ccb6db","sha256":"7a4fa06e062c09e2f7ac849fa595f9bafe677a24346d8aae026d2df219862f91","sha512":"35b88b1e569490e4f2191c0d47193d307a0afad90ec7fca7066a4b1ae59f746e14c39ea9bcaf156ce60b60bdf5fdf727e4b06802caee9776ed5e704b3e1af052","ssdeep":"","tlshash":"ad31612af5f159f705be67a1731b0106fa54562f0540074b7a3da49d1fb2c13a086e8e","first_seen":"2026-01-08T06:20:46.116972Z","last_seen":"2026-01-08T06:20:46.116972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":326,"dns":113,"connect":100,"send":0,"wait":274,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kalam/v18/YA9Qr0Wd4kDdMtDqHTLMkiQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:20.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/kalam/v18/YA9Qr0Wd4kDdMtDqHTLMkiQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://thugtoner.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22144\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 19:18:29 GMT\r\nexpires: Sat, 02 Jan 2027 19:18:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471711\r\nlast-modified: Wed, 10 Sep 2025 17:04:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22144, version 1.0","md5":"f3ad3b3081bb38a18628d88ddf39b8b6","sha1":"befa33190a885871d06ebf259dc12d0d325fd74c","sha256":"252063af6ade8b9a744cde4ddad0fc21ea53b8ba711eed121a0c2e8610ea9c93","sha512":"1bccfb2381a32a6b016fb8a61dd6050fbb3e1371dc7d132baedd9dcfd7f2612cbf86fc2d725c7395321ca2c30bc820982d8597d64ad2f765e020f529b4566e0d","ssdeep":"384:rt/RILo5NpMtXtJmM951Q2dHslS5Q11FMf1axN1+GZTApHldA6lGahgR5HQ42XBw:rt/RSo5AtXtJX1Q2Glb6fkxN1+GC7Gau","tlshash":"b5a2e1d0989a09f2c157d1e5bb5f624e1bcf089a0f5b3c19b50e5f25ca2ff253301596","first_seen":"2023-05-01T02:32:57Z","last_seen":"2026-07-21T21:54:58.542018Z","times_seen":585,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thugtoner.com/","fqdn":"thugtoner.com","domain":"thugtoner.com","tld":"com"},"ip":{"addr":"185.199.108.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T06:20:18.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thugtoner.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 21:06:04 GMT","end":"Sat, 07 Feb 2026 21:06:03 GMT"},"fingerprint":{"sha1":"A7:2F:3C:FE:89:F3:17:59:73:0C:28:4A:F7:69:0E:A0:3D:66:6C:8B","sha256":"4C:00:D3:7A:D7:82:69:24:27:CF:38:62:29:D5:A9:04:E3:46:FF:AC:F0:03:C5:84:C8:0F:ED:01:95:FD:02:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thugtoner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 09 Nov 2025 23:19:17 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69112175-82b\"\r\nexpires: Thu, 08 Jan 2026 06:30:18 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8DB4:D539B:CEFF00:D23FEE:695F4CA2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 06:20:18 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410030-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853219.514864,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 29835037087e310812f15dd5e31930fb31b6e2c4\r\ncontent-length: 752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"75b86be5370a17d44dbe095076826a4d","sha1":"1a8f0ce646d607a489b1382e7542102c89435be5","sha256":"0bdaa0e04192400dfbadaa8d2c8978677fac72d22d7f027ad974be3c9593bdfc","sha512":"d313d71a3ea507fe2d42f5c4caa3468dc4d635d5771099ea508e5ca45e0dd106b5702555c277b0e07e71428adcd7d4dbc65a96e4f3bb7a1a5a7008d19daafe57","ssdeep":"","tlshash":"344132774ae0c079039182992ae7f109ef5a8087c768f780b6ec49c99fd6e90d4b7199","first_seen":"2026-01-08T06:20:46.11838Z","last_seen":"2026-01-08T06:20:46.11838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":109,"dns":45,"connect":26,"send":0,"wait":154,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"thugtoner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dorkydomains.com/shared/scriptfile2.js","fqdn":"www.dorkydomains.com","domain":"dorkydomains.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:18.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorkydomains.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 01:47:09 GMT","end":"Fri, 20 Mar 2026 01:47:08 GMT"},"fingerprint":{"sha1":"50:22:7E:6A:33:44:56:F2:3C:EA:B5:1E:1C:1D:E1:95:3F:09:1F:6C","sha256":"82:3B:0A:F3:9D:A8:DC:CE:A7:CD:54:6B:77:E5:05:C6:33:91:23:19:ED:63:6E:5C:6B:3E:9E:AD:38:12:7C:AD"}}},"request":{"raw":"GET /shared/scriptfile2.js HTTP/1.1\r\nHost: www.dorkydomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thugtoner.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: GitHub.com\r\ncontent-type: text/html\r\nlocation: https://dorkydomains.com/shared/scriptfile2.js\r\nx-github-request-id: 55B2:113EBC:CEF212:D22A59:695F4CA2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 06:20:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853219.019260,VS0,VE123\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 97690e6afc0992702fc2108c438642371849740b\r\ncontent-length: 162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":6430,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T23:24:28.748346Z","times_seen":17434361,"resource_available":true,"data":null}},"time_used":509,"timings":{"blocked":184,"dns":124,"connect":26,"send":0,"wait":137,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorkydomains.com/shared/stylefile2.css","fqdn":"dorkydomains.com","domain":"dorkydomains.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:19.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorkydomains.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 01:47:09 GMT","end":"Fri, 20 Mar 2026 01:47:08 GMT"},"fingerprint":{"sha1":"50:22:7E:6A:33:44:56:F2:3C:EA:B5:1E:1C:1D:E1:95:3F:09:1F:6C","sha256":"82:3B:0A:F3:9D:A8:DC:CE:A7:CD:54:6B:77:E5:05:C6:33:91:23:19:ED:63:6E:5C:6B:3E:9E:AD:38:12:7C:AD"}}},"request":{"raw":"GET /shared/stylefile2.css HTTP/1.1\r\nHost: dorkydomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thugtoner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 05 Jan 2026 18:41:11 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"695c05c7-cd1\"\r\nexpires: Thu, 08 Jan 2026 06:30:19 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 55B2:113EBC:CEF223:D22A66:695F4CA3\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 08 Jan 2026 06:20:19 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853219.174883,VS0,VE126\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f2ab51baa537d8223b51193ed5e7b9743285f0fe\r\ncontent-length: 1003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":3281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e5cc72b3f2eaa138e2527eb9ed06edef","sha1":"cb62518e7683771aa1e10549c2683c7e212dbe1b","sha256":"b264bd17a8c3635a3962d2300f67401e0cdbe5abb4e8872f0b40a755d7b06f2d","sha512":"02cba3b41895b568a76ef57aafde1666619928fb363056c41df2f35b1be2847f5742be40db70759a9e7964ed4c6c60d9ed2ff484c1fa8565fb28f40d2f286d42","ssdeep":"","tlshash":"5d613f839da304557a1aa52c6ff79756338e8843850fe9f93e88b14ccf843f8519278d","first_seen":"2026-01-08T06:20:46.119655Z","last_seen":"2026-01-08T06:20:46.119655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dorkydomains.com/shared/scriptfile2.js","fqdn":"dorkydomains.com","domain":"dorkydomains.com","tld":"com"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thugtoner.com/","date":"2026-01-08T06:20:19.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dorkydomains.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Dec 2025 01:47:09 GMT","end":"Fri, 20 Mar 2026 01:47:08 GMT"},"fingerprint":{"sha1":"50:22:7E:6A:33:44:56:F2:3C:EA:B5:1E:1C:1D:E1:95:3F:09:1F:6C","sha256":"82:3B:0A:F3:9D:A8:DC:CE:A7:CD:54:6B:77:E5:05:C6:33:91:23:19:ED:63:6E:5C:6B:3E:9E:AD:38:12:7C:AD"}}},"request":{"raw":"GET /shared/scriptfile2.js HTTP/1.1\r\nHost: dorkydomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://thugtoner.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 05 Jan 2026 18:41:11 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"695c05c7-191e\"\r\nexpires: Thu, 08 Jan 2026 06:30:19 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8D9A:1CC626:C59DAA:C8D30D:695F4CA3\r\naccept-ranges: bytes\r\ndate: Thu, 08 Jan 2026 06:20:19 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767853219.175471,VS0,VE133\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8d1ce98f3073765bbcf9a789c9c92256387fed44\r\ncontent-length: 2080\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":6430,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e3b8623845bf1029eefb14a1337d0b1f","sha1":"99fe09be624ac1e3da91477f0485d9c34df993e7","sha256":"347756ae6ff00908154e6d32679e0c5baf035a5bf161ecda649142ca22762484","sha512":"66b50226796f2f80682646fcc1bd12d9c5291355cc0e0222f22eb1a1b6e378426ac4c8b12f82d0fa71967bc1754d33846400eae5251e3b5fd3caaa5f8d9bfc68","ssdeep":"192:lVqwUcoenMngt2TsryX/ii/iVzfTSQOmTGuMM3bf8eiHi36LVlbCLVNGpi8bB:lroK8g24QiMiFPTJMr","tlshash":"71d134477df32d30878b789e96cb510931267007a629d909791dce902fe277492bbbdc","first_seen":"2026-01-08T06:20:46.120605Z","last_seen":"2026-01-08T06:20:46.120605Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}