{"report_id":"28c6d38f-1dab-4905-9d62-caa02d513da2","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-01-30T19:00:17Z","url":{"schema":"http","addr":"astrovault.info","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"104.21.17.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"title":"Dashboard :: Astrovault","dom":{"size":110718,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53259)","md5":"3cf8364028a3fc89e0bc23c1b3195446","sha1":"c516ca5b7ceaf3793c49175a771087b717a14dbe","sha256":"5c8c68b287fa212d9c0c76f549d3108fca4f804e685e714d5b849bbbfafb1b14","sha512":"2e2392acdf434f1cc4a69014e57274a948f5f116969b5da9d5be19fb7fea091750bdad8fa4e941c61bffa420f1953340caf6959591117cda24fdbd6d63c1194e","ssdeep":"1536:f72mG8sqG8veLvNdgeuQGWPVWGZNe/N3oNzNVMN2RZZMS20jMnnVpfaLE:f72mGCsrwf6E","tlshash":"aeb32cf2d384a425b50747e8983b37343157a2afdf46404cb26d15a5e3c7cecae3a998","dom_hash":"domhash16083b932aace318dae67f38b2614502","first_seen":"2026-01-30T18:35:05.664912Z","last_seen":"2026-01-30T19:00:25.326868Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"astrovault.info","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"104.21.17.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T19:00:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":7}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-30T18:59:54Z","timestamp":1769799594,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44324,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-30T18:59:54.990930+0000\",\"flow_id\":1574238652335706,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":44324,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2026-01-30T18:59:54.984666+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-30","alert":"Hunting_JS_WebAssembly","trigger":"astrovault.info/main.3c8e47b3.js?v=local2","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-30","alert":"Detects file containing Telegram Bot API","trigger":"astrovault.info/assets/telegram_logger_v3.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-30","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"astrovault.info/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-30","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"astrovault.info/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"fbsfoewlknwkpew111.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"rpc.walletconnect.org","ip":{"addr":"63.181.223.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-01-30T06:23:13.645409Z","alert_count":0,"request_count":1,"received_data":1653,"sent_data":532,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-01-26T08:28:51.266566Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"astrovault.info","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-30T18:34:58.932322Z","last_seen":"2026-01-30T18:34:58.932322Z","alert_count":43,"request_count":39,"received_data":12577806,"sent_data":18107,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2026-01-24T14:58:58.884967Z","alert_count":2,"request_count":2,"received_data":1592,"sent_data":1021,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-01-28T12:01:47.614806Z","alert_count":0,"request_count":1,"received_data":2470,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fbsfoewlknwkpew111.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-30T01:31:05.094993Z","last_seen":"2026-01-23T23:58:39.365887Z","alert_count":1,"request_count":1,"received_data":625,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":5,"received_data":15435,"sent_data":2502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"astrovault.info/assets/telegram_logger_v3.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"2844b8414a0519fad850b18ffb04f8f4","sha1":"a7717face865a1d037c5740c257bf833f87fc203","sha256":"016da0e4a9a2eeeeead31c5b15268143c91be7d2ca3458261c3592dd57f77a07","sha512":"1983660c8b3c9ed36a45152106c116a1be30a563de13e2700a0632edfc2076e7a92c2ab2e7fee85ef1759a8808881da419124fc86e22e12c05732a0354976818","size":15043,"token":"8420854409:AAH8viwC7j6TM_36JgkVI0JFWPdxJi1Kj48","is_revoked":false,"bot":{"token":"8420854409:AAH8viwC7j6TM_36JgkVI0JFWPdxJi1Kj48","user_id":"8420854409","username":"AstrovaultLogs_bot","first_name":"AstrovaultLogs","last_name":"","chat":{"chat_id":"-1003864273446","title":"Astro logs","type":"supergroup","bot_is":"administrator","total_users":3,"active_members":null,"admins":[{"user_id":8094488811,"username":"Trah1ch","first_name":"Trah1ch","last_name":"","is_bot":false},{"user_id":8093922242,"username":"mmm2194","first_name":"m","last_name":"","is_bot":false},{"user_id":8420854409,"username":"AstrovaultLogs_bot","first_name":"AstrovaultLogs","last_name":"","is_bot":true}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38111fd9f9a56adcc67ecb7e00ffc3f1","sha1":"921ca9df4b5fc16f791d6700a9122d9c8d19ef17","sha256":"e1bc11b3e02682672e2151dd0458ab7cdeecfb971cf831ff6336a20b7e88fee2","sha512":"da9a389e1d0915ae80018ccf9a1174ba0a95d9de5ab04d15a820910acf69282daa1f9cbc7edce94765e55e36bd755188e095100d7da323da43a91713b59084a5","ssdeep":"","tlshash":"bf412073d671c530ab7082a85cd7ba418a362107f1055c83729ca69e0fc7ea6caf764e","size":1890,"data":"","first_seen":"2026-01-30T18:35:05.715554Z","last_seen":"2026-01-30T19:00:25.391465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/main.3c8e47b3.js?v=local2","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8e237fcf1be89d0b2ee3f1d5e8aabd2","sha1":"3649635bc95b30d28fcf3b404add593a5936fc3c","sha256":"e3636d539ca558c83833b8af23af11c42771b5521341eb9175cc7f52564dd560","sha512":"e4cc6b2b551627db589cdb67c4e2224b96951f6fbab014f1d7f98b74a3c38c4959db3178e98293259360fb61f3b2b886260bfcc57c175ed63c92ac6fcf4bc5f8","ssdeep":"49152:hXa0ePEEeess5LlDqWd2Z1gA0zZy0l9Vcx1bO2trIytRJiWoWa2Z7zbam8Ufqean:lFc2Z1gA0zzlo/2Atyt6b1e7D","tlshash":"38767e80b391f8a247eb54d5443f4106f27d7a18600d80a4f27cf9e63869ad6b2b7f79","size":7719046,"data":"","first_seen":"2026-01-30T18:35:05.712745Z","last_seen":"2026-01-30T19:00:25.393248Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-30","alert":"Hunting_JS_WebAssembly","trigger":"astrovault.info/main.3c8e47b3.js?v=local2","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/js/466.5b250f59.chunk.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52904d40fdfeb401589a2faeb7fd5b23","sha1":"43575094c079155fdca535ada8e6f7d2ee615a44","sha256":"2a44bb20bb5463dc66dba29d2020721d8d5f40eb5edc66270b825a22fda4ca07","sha512":"c0371b97b734979df7534f856a8cdd910a69360c55f17b88363dc80f7ba974bccf1b919288467c61c0fff93c6bcb60096dfd5ca3553460d7e3190c4da66a4931","ssdeep":"","tlshash":"30f00e26b073bc65fb325b600c6f3e5ea53c27782018884ef8a02dd0c5d1e2c1322c18","size":502,"data":"","first_seen":"2024-08-19T22:50:39.356338Z","last_seen":"2026-06-22T09:53:44.00954Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/visit_tracker.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16bbc5cfd935b70f5bddb6e825fb245d","sha1":"2065902e80d279cb4793176db0b40f1f16a90b1d","sha256":"0ad5e97bba0533079119ab864e0f0144fc6bb0e7b4aafbc5c30fe61fd40acd01","sha512":"bcdf4f261c876291a78a4b8062e3e5df45f89b69847fbb533da530f10c6fbf665fd8710c4eb89895bb52af68bc4a7922518c1775834b827c9b51aa12eab7dc1d","ssdeep":"","tlshash":"0d60000c000f0300c00cc0003c00cc000000c003000000000000000c0000cc0c0300c0","size":15,"data":"","first_seen":"2025-12-22T07:37:43.092746Z","last_seen":"2026-06-23T18:21:19.292163Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/eleven.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0731dc266a43636b0e166275728b329f","sha1":"10ab55c566941fe6319681ccaa36e6313c7336e6","sha256":"c8a7922f93eb75f4329d4576efd7cba8a84cd888cf80856fa42dd171a4efe22f","sha512":"01ad04b1d570264819d09409aa94fec0af2f32c2b00dd96d76d8ed616b8293dbbe912e60cbb42a144ee4c665be0039f0f6036ee1ba7c3e682e0fa22066c7a744","ssdeep":"98304:dml/voXqyL4cDRxWyeI4vWSuyZXJPcrnE:dq/gXqyL4cDRxWyeI4vWSuyZXJPcrnE","tlshash":"3ef57c8073b1a079439741e4947b1501f238a85a7408c0acfbecd9f7af999c9897bf79","size":3556158,"data":"","first_seen":"2025-12-02T13:22:34.804996Z","last_seen":"2026-08-09T03:42:01.548401Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-08-12T13:24:05.436873Z","times_seen":83642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-08-12T13:24:05.436873Z","times_seen":83642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/drainer_minimal.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b176f12a40018572c57847e4e3e8c94","sha1":"7510920ee9c19fc2a35e16697d422159d83d1d95","sha256":"795032feac9dedeeff618d544229826418cc80ce4f57ac014076ea175bbbe153","sha512":"67d64cf00abdf255dca080cadc2526a812c99bca2404d9a4df2f4f8bfc38a4ca87b4d4faaabc8a02f7a56fb580f6bf196db0a5cf56f330b843792297f2af81d4","ssdeep":"","tlshash":"38515384fab9a3714723a13e4397960035296017310ced213ebc8395df991c94473ae7","size":2750,"data":"","first_seen":"2026-01-30T18:35:05.705968Z","last_seen":"2026-01-30T19:00:25.341036Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-08-12T13:24:05.436873Z","times_seen":83642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-08-12T13:24:05.436873Z","times_seen":83642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-08-12T13:24:05.436873Z","times_seen":83642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/remove_wallet_modal.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18289d25b85c2c8b5ec2c8c8ca04728d","sha1":"a45917802a93537107a857fe6bad9a2a3f48661a","sha256":"6f8798225255d935eaa7a23ed1a9189583944402ff14a6e5d6011d65af4b3bf9","sha512":"9ecef87f4b09c944e8b0a74aedb86a30e08407252768f7c9a4b42dca3cefbfff0c5f7cdec53d5f36b6b131d084848f716985c9581dbe63284d4ea284674dbc33","ssdeep":"","tlshash":"dc41bc885bff62790e63363f976ba79c3a328057380aca313a9c0b441fe01641d57ee0","size":2089,"data":"","first_seen":"2026-01-30T18:35:05.708214Z","last_seen":"2026-01-30T19:00:25.372217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/roadmap_final_override.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f5f9df059be21e03e8eaa51bbe8c331","sha1":"6e17dc4b6d6419bb2060364448e168d37ed58fc2","sha256":"5f2491435d08d3802f10af4c57d69f6a172c15d007366c4288816c4eb3951007","sha512":"a0208f60ae33c522cf4d38ca9946ff064b2af3434e3350c970d55cbb8c92c74cdcd9b577400fe167b7af638ef286e59d5ff963ecb46fd09b3d2b5818bcae361c","ssdeep":"","tlshash":"6231fe5878bf60639623e13eaf6f7508b476816f3458d9223cbe49812fe029527a7cd0","size":1661,"data":"","first_seen":"2026-01-30T18:35:05.696218Z","last_seen":"2026-01-30T19:00:25.37644Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/telegram_logger_v3.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2844b8414a0519fad850b18ffb04f8f4","sha1":"a7717face865a1d037c5740c257bf833f87fc203","sha256":"016da0e4a9a2eeeeead31c5b15268143c91be7d2ca3458261c3592dd57f77a07","sha512":"1983660c8b3c9ed36a45152106c116a1be30a563de13e2700a0632edfc2076e7a92c2ab2e7fee85ef1759a8808881da419124fc86e22e12c05732a0354976818","ssdeep":"192:k13HieVdUixJKdX9LjrCi7BiOpiGyN1r43/piDIC/AzZi1vuP7ayLHpXYzeQtmVr:q3G77PGrFFeroDtabKZuBDN","tlshash":"b86240a916eb2611467371be0b1f62042032a467360ede74bfac87417f9523cceb5b99","size":15043,"data":"","first_seen":"2026-01-30T18:35:05.687371Z","last_seen":"2026-01-30T19:00:25.377721Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-30","alert":"Detects file containing Telegram Bot API","trigger":"astrovault.info/assets/telegram_logger_v3.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-08-12T13:24:05.436873Z","times_seen":83642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Code:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Fira+Code:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 18:59:54 GMT\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"364d80757a1c7c81dccbf8d6caeb7ae7","sha1":"abf8e3b38eb2295c6378231fb2ecabae5ecd4b2f","sha256":"17babf90f4bae4a92ef7f4f24552b88b41c391b89328f46faa49286f5c2c2c6a","sha512":"6a0c6519a03917cedd40ecfe91e6cb8d30a42a61c005244bf8c09934a12132ba0fe963dd6e5c77a9baa19944cadb274ecf81e1780697acc5f3e22ae85b02c131","ssdeep":"","tlshash":"1c41aaa601a79400afa30cc177cebe779e1e2198b041c6b95efd08989ce7d32435472e","first_seen":"2025-09-17T03:18:47.282954Z","last_seen":"2026-08-09T03:42:01.541041Z","times_seen":905,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/socket.io/?EIO=4\u0026transport=polling\u0026t=8zfnla4y","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=8zfnla4y HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88kOrD3nTONu2dKVGoozO8olVmuaWQ84vz%2BFpbdkHzHANUwiaubAyZkYMjtMxu9012mEhLEYgtK%2B0UI7L%2BxrQgrprWaIkUEm0kOr7bbT%2BRw%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9c6335900f295699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"90cf22a81d9e79fa23cf6828c3273fd0","sha1":"b12f39d75073f45f85a2f8377f368eaa25e121c6","sha256":"a12168e3f5f7cb6f11843c5cc015ec9a3ad2d7abcf5c376ad96484f171b9ca85","sha512":"2c3c98296e74eff2f196ae6c5681afab5a6570c6d49bc553c4c1c3922de005afb7c835271633e93d187fdb25902ea7f7869bbbbddbe1e9dc533505067e84ec0b","ssdeep":"","tlshash":"2eb02b85452c42c0ed30729070e359081504380e46c140d83294008e441b0002002617","first_seen":"2026-01-30T19:00:25.331604Z","last_seen":"2026-01-30T19:00:25.331604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/mc/farm?env=public","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /mc/farm?env=public HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nCache: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nratelimit-policy: 500;w=300\r\nratelimit-limit: 500\r\nratelimit-remaining: 495\r\nratelimit-reset: 300\r\netag: W/\"1a8e-l3psG51ulLc/PK7WfG1JwogcRnE\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EoDBm4K%2Fe915ANocT8nWal%2BM%2Fr3OaQYZaYheOohphUlfp3HOzd0FM%2Fnql157z5HMbGc4ufcuqz8qsDeIk4mFr%2BvxNt0peiZXJTFIv8KAd6k%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 9c633592b9515699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6798,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3255055bd877c760fa1d20ed379d9a14","sha1":"977a6c1b9d6e94b73f3caed67c6d49c2881c4671","sha256":"e5fd48020f8c1895b64341d97016ba80476b6b282a9fbc4b17acb4ae3a76c939","sha512":"e24c847947b8bce10785f99c36007fd885587278444d9a87397cd6ef70c99bc801b2747e0a541fa82ed75b0d296ffecf914287d0e3c4daf6cb5ad51958f08aba","ssdeep":"96:OOvTuoYuP2oz1Coi+5cKoPv9JoMbT0o7vx9odBT7N42W:9T1YWhBneZc2DEfvNdW","tlshash":"d5e1442f01a7f5ba96e96b81c5363c835098bde242501c31de395f9c85bc4bd8e05d7b","first_seen":"2026-01-30T19:00:25.334422Z","last_seen":"2026-01-30T19:00:25.334422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/mc/misc/globalConfig?env=public","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /mc/misc/globalConfig?env=public HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nCache: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nratelimit-policy: 500;w=300\r\nratelimit-limit: 500\r\nratelimit-remaining: 499\r\nratelimit-reset: 300\r\netag: W/\"227-qvMW+h1ztqLqo53w1qnZUlX0VFU\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00o9%2FROOheOloEsKStQ227h6iOg%2Bxlf4MAvmn2XUsGDLku%2BSYqlJ9nZ%2BEMOfNMKKAM7jjWc2AjDUbYfCfny7wP2vJl080abfJ4nhVMON7QY%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 9c633592c9575699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b323587355e3ab7842e18ddd633c737d","sha1":"aaf316fa1d73b6a2eaa39df0d6a9d95255f45455","sha256":"6471e6c2168341fbd900b1cb86f26a77bf190b0c1dc0d17bcb72fcf827a38588","sha512":"92b15195e5b519cd9cb515e44a39824ff6dedbefbd18a17ffe1d1b75919668df6f2387452722adf4c3410707c3b6ec905ba96985c8a6c532ae2b07651604728a","ssdeep":"","tlshash":"d8f04619548166ecce12eb489c57b95bae6eb81b44dc103cb4e6de1882ceabdc410cb6","first_seen":"2026-01-30T18:35:05.676306Z","last_seen":"2026-01-30T19:00:25.336808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/js/466.5b250f59.chunk.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/js/466.5b250f59.chunk.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 18:59:53 GMT\r\netag: W/\"6977b9a9-1f6\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYw%2Bp6AsB0amwtH%2BTW58L1gKVebcCdUIhpm0kHBo5sTy2sM3DrGncuhnJVKPaJ1wPkAtoG1crSId4sU5SW0fbHJmkebz5DcRMM9EBdE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c633592c95a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (455)","md5":"52904d40fdfeb401589a2faeb7fd5b23","sha1":"43575094c079155fdca535ada8e6f7d2ee615a44","sha256":"2a44bb20bb5463dc66dba29d2020721d8d5f40eb5edc66270b825a22fda4ca07","sha512":"c0371b97b734979df7534f856a8cdd910a69360c55f17b88363dc80f7ba974bccf1b919288467c61c0fff93c6bcb60096dfd5ca3553460d7e3190c4da66a4931","ssdeep":"","tlshash":"30f00e26b073bc65fb325b600c6f3e5ea53c27782018884ef8a02dd0c5d1e2c1322c18","first_seen":"2024-08-19T22:50:39.356338Z","last_seen":"2026-06-22T09:53:44.00954Z","times_seen":10,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/logo-osmo.b8ab3192672d795be954.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/logo-osmo.b8ab3192672d795be954.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: W/\"69765d09-66d09\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Si17nW3lNzj07xvoWBlFOyI8LHH9qitWvNJA4FxUFL%2BBRNQmufc%2BeWZRaug0jZPrLtrFnqT4YaHNZ2Ey5bAxGQrEfhKzFq9jG%2Bo6uV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335944a825699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421129,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6eddbb90ad9da4026ff25be978a94a0","sha1":"95440db024e2c1e5d63e52b62c41849c1d2ca535","sha256":"31f6251d6f3bedbbe8f5746a795579616581cc3cb906b49d70c0d0f0b4b1e2b0","sha512":"3999dea4652c086b14ab3ab0b85cfbb58591e51a5cb694ed92a0c70a9509d912ff22ea45c701723ffa0d2ed36993e84059d7f4c760bdf3db217b5d85cc47914e","ssdeep":"12288:DN2HT6XarnLnASS33p+wAnqUjH2RA6kKqxdfCm:tqHnoHIqUIA6UdfCm","tlshash":"789423468b6cb46c5050f3fab4099beb84e69f11085fead64d4059e764fbb0c0853ebb","first_seen":"2026-01-30T18:35:05.683117Z","last_seen":"2026-06-22T09:53:43.998593Z","times_seen":9,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/drainer_minimal.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/drainer_minimal.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 18:59:53 GMT\r\netag: W/\"6977b9a9-abe\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZ1%2FJ%2FvM3lcIs%2BuIQ6nMitJ4dMVge1LhGZJzqtWLsgPvVXOM47KpFM9qbLBpFKnNxLXU8Xg9nsva%2FyWoRG43R6A6cCf6YDaeThFhBvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335841d235699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2750,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9b176f12a40018572c57847e4e3e8c94","sha1":"7510920ee9c19fc2a35e16697d422159d83d1d95","sha256":"795032feac9dedeeff618d544229826418cc80ce4f57ac014076ea175bbbe153","sha512":"67d64cf00abdf255dca080cadc2526a812c99bca2404d9a4df2f4f8bfc38a4ca87b4d4faaabc8a02f7a56fb580f6bf196db0a5cf56f330b843792297f2af81d4","ssdeep":"","tlshash":"38515384fab9a3714723a13e4397960035296017310ced213ebc8395df991c94473ae7","first_seen":"2026-01-30T18:35:05.705968Z","last_seen":"2026-01-30T19:00:25.341036Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:bold,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:bold,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 400 Bad Request\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":209,"dns":1,"connect":23,"send":0,"wait":33,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/settings.json","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 05:09:21 GMT\r\netag: W/\"6976f701-344\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfqte70TIUpjZlkDU2VR%2FdGg%2BgfLLeiNmEMxTMw9nFcCfPMCwPqWj2rUn7W2WCmqhOmFVpKL0OxktvU%2BusKUDV9TJirWJXt3ujlneEA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63358b3b2d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"41370f5b010b5ff6e113d807036d3966","sha1":"24784cfc700c611dcabbcf5acd3db89de9a333d5","sha256":"0a110f98f7e8d2a55274405fadb51c0f0fed6710edf269fd80779fbe01abedc8","sha512":"311fdcf7bf84bd64772905a46a3b936f1d614ead4e38d23be0d75b1c4d3d95c30d67fdec64d92446934c3c7815f27db4cba687acf7eccb00325016bd941e0682","ssdeep":"","tlshash":"aa014d48ec21486fd2cd0a38f29e92140916ad6783583c102f2f5028af2d33f1f72acd","first_seen":"2026-01-30T18:35:05.67828Z","last_seen":"2026-01-30T19:00:25.343926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=ac2ace29e1ac175dbb45f52cf81c598f","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"63.181.223.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=ac2ace29e1ac175dbb45f52cf81c598f HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 1310\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 30114410-9fa8-407d-b9f7-f47d5923bf82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"84c2f291d107bd272195cb3f14a09428","sha1":"4475418f809b1833308c68505490ec5cfd92d401","sha256":"4653eeb486057c8b16dbde9c049a69cd49eaa60cf9e3eae03f801ed59a5bea77","sha512":"3354fe1b4bb946a0ec467db19c0e3b1e09f6e1bb21859de0ac4fd8db5f5673c68f7bc6e673065373c248d302785c2dae81f5bb011c09b3370727ac4f60e8afdf","ssdeep":"","tlshash":"a321368c84800c40dcb4d398dbbce8cb94aef01399cd289959f42cb155bd6b3355276e","first_seen":"2026-01-30T19:00:25.345537Z","last_seen":"2026-02-11T15:25:52.868709Z","times_seen":123,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":406,"dns":15,"connect":21,"send":0,"wait":22,"receive":0,"ssl":366},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/api/visit","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nContent-Length: 87\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 405 Method Not Allowed\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67HyHhOkj59XyYb8Raqp%2BdnsPjJa7kBejC%2BFbg3%2BkaivP3gyu7%2BvguAnAlyxssKrpCuiNxv8pCcXJWXtnLUhj%2BYsrg%2BsjAks%2Biwujgk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63358e6de95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"d5ce8ba8dcf98117e9329c3419a8298a","sha1":"fde2a01dc50e1858314b5572887549e2bc2b19b7","sha256":"0e3ae3475a519a5c9f23858c084d3bcd133111e4f42234e99bf09652c5fd937f","sha512":"98f2673ba8d2e2afa175cfd09e401dedd0e5bbb09a0c20aa3c7395343a79a605ac6b2d5af83d7e2f46586de4e0444e0fa86c9641edd26d0e75db4292fabc4f3b","ssdeep":"","tlshash":"17c08c6e271b3c48c66321742ac3f4b0c28e92a284f84300a444005331c32269acbb51","first_seen":"2024-04-28T11:50:49Z","last_seen":"2026-08-05T03:07:59.9369Z","times_seen":163,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/logo-const.bc6f65b6e043f98f47ca.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/logo-const.bc6f65b6e043f98f47ca.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: W/\"69765d09-295\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U31022d9tx%2BZ8NmCrHZRBd6IBdjqXtV6S0iAl5pKhRcKAOSmNeUkJZjddPZej%2B%2BgQ5J1SMEB6kIyq4zVdO7Au3Zlb5ThPwh8m4qbeiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335943a7e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdb4bf4ad4934ffccd0c4d617867181f","sha1":"42096fa9e802128acae7cacf394ebd255e7333e5","sha256":"6e9f0b055865e16dd6505287ecd27261aba719128877e4b67215128735af9d63","sha512":"14f6b6b08705ed36e2e87969b446d2840babb893a579c4b8a0005ae62925f5ec9db1e7b6eb3f756923d598da46f5c6510843edfebe4929c4c2506035c6853770","ssdeep":"","tlshash":"250149ea252ce75c5055433c471ab0b931e639cf350a6b4836e0f8261c591fe0de758e","first_seen":"2026-01-30T18:35:05.681018Z","last_seen":"2026-06-22T09:53:44.037745Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/logo-axv.5f0b26624713d87c354e.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/logo-axv.5f0b26624713d87c354e.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: W/\"69765d09-3ea\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tItxdk5hO3f2XnbULaNOe8ZEUVJNiPLaQJpqhjPDumZB0mUkwRUH47N2vA9pZQZGakDkB7BuDaYCkO3NFtyEsqsPbqVXI414imxJZtk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335946a9f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"782f614e4b45fd1f62c6a6f825f4b406","sha1":"294e7359a676603cfb550a6c668a9d276203b74e","sha256":"a547caf1f9b133ab61811591dbef1c554688aeebca944bb51474677e6803fba8","sha512":"e165e2fda8f0288ed21ad16edc37f658afcb9b97f79e7f0ef507f5971c7e35195716eda9676d9b85d28a7f8c8c677f8c3dc343b2ac405270c0ecd0c6edebd2b9","ssdeep":"","tlshash":"45110270dbbdf97bd915c778cb2c5471402f31d95a04029c72a4ef482c09aba121ded4","first_seen":"2026-01-30T18:35:05.666757Z","last_seen":"2026-06-22T09:53:43.978264Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/socket.io/?EIO=4\u0026transport=polling\u0026t=8zgazkwp\u0026sid=Z45dSf5ZAS5872UzAAH0","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=8zgazkwp\u0026sid=Z45dSf5ZAS5872UzAAH0 HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 33\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":33,"data":"bg6R0eXBlAKRkYXRh1AAAo25zcKMvbWM="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rd6ya73I3FwKrt3OzVZ7lV4REgQW7UScgsSqMiej9Rwleg17akl%2F3PBpTWL2n6x16fEU0rYSwjdk1aXVJkaugGbkFvLlSpbUzo4WL6%2Fd%2FrE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9c6335958b835699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-12T13:35:43.713265Z","times_seen":447946,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/main.f0c04d8c.css?v=local","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /main.f0c04d8c.css?v=local HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 22:21:00 GMT\r\netag: W/\"6976974c-32c93\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMjSaM%2FSsqEMaHx3DIZZtwXlubpCwlRAXHe6r5VLnc6m2WYvsa%2BFfFLBiVuwzyoUejEjJ21C2BZ0ziWGwGsGrA%2B7E5btMcicbVHQS1g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335842d2e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208019,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35617)","md5":"b62cf27e6f6741cb47b90451abdba175","sha1":"2fbcbb42786cdab36337f15242756c84e3be6bb4","sha256":"e1d8952159a7d42577b4d408342372f145c32ece2ead8b8aacbea6ac694405ff","sha512":"60da544bc78c45bc4de2b01c73bb228fb46391f42fe0f66897e7cfdfcccb311243bbab8e3ed5b6f6cb4ec671aa56881779dbb3808a3b136c9301cdd77253e4ad","ssdeep":"1536:K5JD8ROsmA5L0ze4CQDdOPdhDEkaMQCM74qJpZPubU:K5JD83F0IdhyCa4ZU","tlshash":"39142998a354b67cee1fdc3693ec4a4c85388051a6121efd6112916e8adf3f4037fa5e","first_seen":"2026-01-30T18:35:05.694413Z","last_seen":"2026-01-30T19:00:25.35342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 18:59:54 GMT\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-12T11:51:11.125002Z","times_seen":20729,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c63358cdbdd56cb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":167,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/settings.json","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 05:09:21 GMT\r\netag: W/\"6976f701-344\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gp5QCc8l29BxA20AVT6SsMpQHEYUQhcMDgAy04uLmPV2hKDu%2Fdu6lxTT3dNtYG6rg4EXMrZXsuctESMMCIYM7zYzmF5ZwgIHpigGNxU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63358cac545699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"41370f5b010b5ff6e113d807036d3966","sha1":"24784cfc700c611dcabbcf5acd3db89de9a333d5","sha256":"0a110f98f7e8d2a55274405fadb51c0f0fed6710edf269fd80779fbe01abedc8","sha512":"311fdcf7bf84bd64772905a46a3b936f1d614ead4e38d23be0d75b1c4d3d95c30d67fdec64d92446934c3c7815f27db4cba687acf7eccb00325016bd941e0682","ssdeep":"","tlshash":"aa014d48ec21486fd2cd0a38f29e92140916ad6783583c102f2f5028af2d33f1f72acd","first_seen":"2026-01-30T18:35:05.67828Z","last_seen":"2026-01-30T19:00:25.343926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 18:47:06 GMT\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=st0eYWFyMyRmDl0kxDxuvZolLtxFMdoxTetEnDfDAyYKcCC5zOUV0LCWYO0PMG%2BeWqCtX5%2BJLMVKDof0pX3JtA3EMSnZcti6k8mZAM8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c63358cbc685699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 194\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c63358f3fc15696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2d64c5f9293eb3ef064b089af272cf3","sha1":"9087ac99c5049ae550deb6681558d2b36c367d36","sha256":"1298242b7d0d06fa652c31118aca2012644308584d15fd18ddf0acac54153be3","sha512":"85f143037c6f65aa56187e7181381ce7a2d6f528f01af6f4ef61383c977e2d4600bcf204dbcc0add7b68945fb6c8f61523a3d8f0b1ce8cbc52916dc24a8462be","ssdeep":"","tlshash":"40018cf006978e60d0f89c8ab116be8562107c87f8cb2e430d084dc02af9485f734463","first_seen":"2025-11-30T01:31:11.661996Z","last_seen":"2026-02-07T14:06:38.452246Z","times_seen":39,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/mc/pool?env=public","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /mc/pool?env=public HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nCache: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nratelimit-policy: 500;w=300\r\nratelimit-limit: 500\r\nratelimit-remaining: 496\r\nratelimit-reset: 300\r\netag: W/\"26612-OLPdJKQtzbd90hnuWi/zOspXjSE\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNiTc6VheNDIdYpYPFcYJBcdLId4z1kHv0PW0bxYjCLbAYAdj1c5LoXAHhxwyfTFsTgpv%2BqHvw%2BvcGTvx%2Ba8Ez7%2Fdpo78JZSXmDAD96sUNc%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 9c633592b94f5699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9704769b286995efb3b7a1fd25d1ed3d","sha1":"38b3dd24a42dcdb77dd219ee5a2ff33aca578d21","sha256":"1a8407bf4cd0c2557ae3588a15e89e9866061f0e7799dc8a5ebd2f8c1a1d691d","sha512":"7f73243f94aceec5b8726f0292b20b83eb63b4181044642c462be7d07011c10821c632b82485c3e8f8f6979590c93acc9b17df26997dc28f8a9e732ac46099e4","ssdeep":"1536:XNNX584fYifXT9wiPIHx4+KeiXSLV9ekz02OmPmICfAfztUr+kLgsiyaZ4sxHgSV:XhF+mvfQzt+TBpZRuBnnZeARZR/4eo2","tlshash":"b8e3b71d5097bab88af9d701cc3a3d4290ddbc668151ac399d785f6c45fe8fe890283b","first_seen":"2026-01-30T19:00:25.358177Z","last_seen":"2026-01-30T19:00:25.358177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":986,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/eleven.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 18:59:53 GMT\r\netag: W/\"6977b9a9-36433e\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHRETPqsmO9iHxywUsMKlO2z5mvP7tnuPLUhA0kmrIB%2ByiMde272Xyg7DcTvjj9HAe4cK0UGY1zYHYca%2BZPPxucd0vvnHcXSgmk%2BfXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335841d225699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3556158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e60d780300a74c70dc6418ea19873295","sha1":"74001d33824730e25d3d840e0c642f9f986015d7","sha256":"dcb99cd44bfd05f2cfc3c04527f35accfdd3df490666015cbafc125c4b368250","sha512":"617f21408d485ed842373a7c935208431b033f279973a23752599f44a0f4b4f1b125068a3ad244650a5c24d9859d2b9702998c1d415b43eb801bfd6d9b5b2ade","ssdeep":"24576:dmNHxkmMEWI2xMrvZKhch+k+ub6BqyxRz:dmNHKmME32xohKhcoGGBqyLz","tlshash":"a1254c9073a5b06243da14e4187b1006f279bc68744d80acf69cecfb7da9d84963bf79","first_seen":"2025-12-02T13:22:34.735267Z","last_seen":"2026-08-09T03:42:01.52773Z","times_seen":518,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/main.3c8e47b3.js?v=local2","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /main.3c8e47b3.js?v=local2 HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 18:59:53 GMT\r\netag: W/\"6977b9a9-75c886\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqZSvaVHvIhMqUdjUlkCYGLmZQ5f6GMr9xx9M%2F8Sw7ZWRsXMvfYw%2BrvnTD2n%2Fbp8XfhKsaEsQly3suhApCXfjWcjyxHftLmUTUxbTaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335842d2d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7719046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"1576c42806ac946c47b1a83efa04bd88","sha1":"dabb79c74b0d605025adebfe54860af7e78f4ed9","sha256":"67b04efa3cdfd3146913c865bb671714f132ef7328a110cb515132435bdb3972","sha512":"674650bb37f391a53422b55ad63cc6740efc673a2b8d291b1881f10886d95869c7eb27129b5e5458021bee8d0d55e98bef692f6e944b87d717c6fdb92b3d0c10","ssdeep":"6144:7MUEAJtcCCQJHE8nrHoUCOovcxCk16ai7OpEPuv9xyRAsWGN9l8e9SE8:wUEGtcCCQJHXotk0aiiePE9ul8esb","tlshash":"12251a8033b5f4a247da65d4443b5009f378ba2d240e406cf758e9e7bca8ac9a57ef35","first_seen":"2026-01-30T18:35:05.688354Z","last_seen":"2026-01-30T19:00:25.36057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/fix_checkmarks.css","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/fix_checkmarks.css HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 18:35:25 GMT\r\netag: W/\"6979056d-4bb\"\r\nexpires: Fri, 29 Jan 2027 01:50:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 148148\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9nm2KZjk1v6oisl9zMfbG7oZooLje4%2FXbENdtbpH6maeBQ2TjjgenISZYCduKg2p0o8XHZAme8swSLvwm3OMlyMVDREjlvQDZ2yfFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335842d2f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"bde41593bd9938d2b9d9f4c6566db761","sha1":"e02c77c8f1fc60aa8caf804a2e6c408f82cf2ca2","sha256":"1ee9672d54a596813e2b2a5f360ea740ed219ef690031d962f2b59a7b8827542","sha512":"b865e52f736d5145fc9859a1fc1cbecca1e77b8b926445102050c1388f58f2bc698cc691521277e262733803257ce9f1c7d066d0ce31f2ab4406d97ba0bdddc4","ssdeep":"","tlshash":"b621cf2beadb86447261448d1b137bfc7d3ca02713498c7675853b780f8b3c35452799","first_seen":"2026-01-30T18:35:05.707247Z","last_seen":"2026-01-30T19:00:25.362232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 12:14:55 GMT","end":"Thu, 19 Mar 2026 13:14:43 GMT"},"fingerprint":{"sha1":"9F:6D:86:C5:B8:42:73:79:95:D9:AD:A7:9E:37:F2:54:CF:A0:9C:90","sha256":"C1:37:01:B7:C2:DD:54:62:A0:93:A6:F0:05:9D:5A:0C:55:E4:49:78:D8:DD:C8:9D:B1:B8:6B:75:83:70:B2:28"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, HEAD, POST, OPTIONS, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://astrovault.info\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3TxO21VHkAvU%2FUNW0m2VQA2W8kILEvbbvGPfYp30q4UkNfUaaHwPjZNoUfxVbGwOVR2hs0uu8r8GfC2r6GEeo7Rgge1\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c63358bdda05693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"460b460d57658b5fd29c5e4934445c33","sha1":"24a724b25ef1401657cafa588835edfb9f7ef1f7","sha256":"93eefe1243dfce9ac06bf199cc9962e610bab6bff4f096662a357d27c9aefa70","sha512":"127d42078b0a87c6d0a70bd359dbcf50844e871ae9e98875a63f2303950b50bcc04fdb72df3f2e157dde3c019355fb67791147d38d6c3c570e1bde1d3b8f31c2","ssdeep":"","tlshash":"a9012428e4680e7b88b80358b4286a07122422075f16354e7fd4878d0f8d8bf20b124e","first_seen":"2025-12-17T10:03:05.72606Z","last_seen":"2026-03-25T09:03:12.863773Z","times_seen":3067,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":50,"dns":33,"connect":1,"send":0,"wait":226,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 18:16:24 GMT\r\nexpires: Thu, 28 Jan 2027 18:16:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 175411\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-12T12:08:25.613329Z","times_seen":31829,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":147,"dns":1,"connect":14,"send":0,"wait":15,"receive":27,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/mc/chain/chains?env=public","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /mc/chain/chains?env=public HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nCache: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nratelimit-policy: 500;w=300\r\nratelimit-limit: 500\r\nratelimit-remaining: 497\r\nratelimit-reset: 300\r\netag: W/\"9768-ahy1cxxipAmLtkqDD5Z3k+SZDPQ\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrjyFFARo7hjMPvgLHfw5YHiaZaHGRrtFApKzyBI%2F%2FZwTv73RbpByNdqZSj4orWOgheJHbymIfHyVD%2FG4FhWWlQB4TxoCbO5H11MraF1o6Q%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 9c633592c9565699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38760,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1016579e3524a51a834d62124766a7db","sha1":"6a1cb5731c62a4098bb64a830f967793e4990cf4","sha256":"efec84341d20642b8f144d5ce879597a9d0f6975669840a9a66a3db012ed027a","sha512":"6f6d316a3fba255445c0db90ec504d9572c3019a5633e150303ad8906923f7d1a8388e929e952e3942a27d521645521f5bd1d713fd8562f11bf88b898278cfda","ssdeep":"384:ElJ8jk4pDz57v0/g0aO2MPE971/WktdXDUNNhFCbY:Er85V0o0S97Aktds","tlshash":"690313f62709d1fc17aa768a09d93e805c5be330fd41046aeb784f04c61bf5ad13ae66","first_seen":"2026-01-30T18:35:05.704415Z","last_seen":"2026-06-22T09:53:44.054936Z","times_seen":9,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/logo-xatom.daac6b0df6cab97834b3.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/logo-xatom.daac6b0df6cab97834b3.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: W/\"69765d09-19fe\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijCZ3QRRZQzXnWSMrRmkqa9naPsBwf4UlUhdxysmWaB1x7AJjLn%2FQxDExMSTVDcMOEzECVYJh9BK6WbUUzOmCKnIZ07Ub3otA4nBmjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335946a995699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6654,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"510ea9f5771d6ba9bbc75b35ac6e3497","sha1":"acca20babb0a3a073017e7849f9350504b821841","sha256":"134817860802b401e5ee21dc1608b61330364bbc7f74cf3fb69ed797971b986c","sha512":"73aefc733b1bf3effd62e2863b3c2b7b2a500a25ad315ef37939adf0b219a96f25f1cfd31b0ed4e1620c55f772bd05e1d883cd69a8634e0897546406ba475961","ssdeep":"96:H+LfPa7mmFB/68GM+JFG6A7iLhpYJiOHHyGHlWqbP9Ngdfyj7d6UqrGiRtLpy:H+LHaFx686ThqJPy4lWup8vrGORI","tlshash":"63d11efbc354e1e1780f86b4dd3718b2341778ff9a81e08823a9be15d656de48718ac4","first_seen":"2026-01-30T18:35:05.700274Z","last_seen":"2026-06-22T09:53:43.968575Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T18:59:53.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 18:47:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNKQCEkZOyyxnfFd4%2FmgjLnctRWUxclW8uypmUvAftdoGrwVgrlgMZwtIFYhxHTabbqwMcv%2BGV8DvV2HyVO61d9OGDXDXPtAhvuZ8bE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c633581c98e569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8714,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3117), with CRLF, LF line terminators","md5":"50203db1fa3463e5f21c1d1f007919dd","sha1":"a25a9432eb7f4dbc18c92fcf387fe2de5069b42b","sha256":"98a77aac79d8512da376977b83a72627d374c665b83e8574374d341ae52c12a1","sha512":"040deefe7904bcf6c8d030b67f6ca4613a82e364a8362d193fb3181665476e4f83271ec3ff8af76bdcfb6ddb036f3f198ff6bdedd2fcd84aabd236cd14790332","ssdeep":"192:5TzY95axHg6FRbqaRyoo6UbqaRyoo6EoLY51IKm13TfMLEpvBNl:dzY95a3qaRyLqaRyiSIp13TfML4","tlshash":"e902fa73ce2181315a3297a5adf7b684d932d10bd2a3cc02b16ca5990fc5fb988b7d4d","first_seen":"2026-01-30T18:35:05.686286Z","last_seen":"2026-01-30T19:00:25.368614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":62,"dns":39,"connect":1,"send":0,"wait":159,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/visit_tracker.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/visit_tracker.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 18:59:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nage: 1523\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHZ5so7xuCkhWab0TwHRC3RguKEs9IeIK52aSruJgahih91A5U4LNPnM6QNb%2FnzVQbmFyFmfFCXJ04kSlsy4xXdKNYfzADw0UChmXys%3D\"}]}\r\netag: W/\"6977b9a9-f\"\r\ncontent-encoding: br\r\ncf-ray: 9c6335841d255699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"16bbc5cfd935b70f5bddb6e825fb245d","sha1":"2065902e80d279cb4793176db0b40f1f16a90b1d","sha256":"0ad5e97bba0533079119ab864e0f0144fc6bb0e7b4aafbc5c30fe61fd40acd01","sha512":"bcdf4f261c876291a78a4b8062e3e5df45f89b69847fbb533da530f10c6fbf665fd8710c4eb89895bb52af68bc4a7922518c1775834b827c9b51aa12eab7dc1d","ssdeep":"","tlshash":"0d60000c000f0300c00cc0003c00cc000000c003000000000000000c0000cc0c0300c0","first_seen":"2025-12-22T07:37:43.092746Z","last_seen":"2026-06-23T18:21:19.292163Z","times_seen":6,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/feather.css","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /feather.css HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 19:06:29 GMT\r\netag: W/\"697669b5-2969\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjeftFzkBVHvf0z0WRJcOCpbdJENzjxkuOWD3BAk4%2FBztTLiRtAIpfgoxru0cZJsXAUdHeWH5KUGIaLu1u4dtfobyve1fglfgouOrQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335842d265699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a63d802f5a74b06d64528bfa17c49a4b","sha1":"364b7935478baeb1c7210bfed3be5b50d96e01d3","sha256":"3e9ee54673d5cc42cc62d28774ee1bbaed1c8af5f261971807b51ac440b39098","sha512":"74f6482ae831ae79541345aa9ecb101a2e870f3043a3f344c6c6be65d296eb9ef9584b8d425a97d597543c204b2646bd7e50b7ec78b0aa72ac13a6c7ac8f4c3e","ssdeep":"96:PbV4hvCzskfJXtNSVYDdanIIDkBHs5cZWyA3LmLn9Efl:PzThLaoe5cEyA3I9Et","tlshash":"ef22c0f29c7d09a01302e4916357a6809bd5f228c9c25d1bf053ad8cf7e3619a6e7adc","first_seen":"2026-01-30T18:35:05.668917Z","last_seen":"2026-01-30T19:00:25.370754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/remove_wallet_modal.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/remove_wallet_modal.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 18:35:25 GMT\r\netag: W/\"6979056d-829\"\r\nexpires: Fri, 29 Jan 2027 01:50:44 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 148148\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZweyFMsczqtbdkkC9jBLO7peL9SIAY3W0ggw29JgaAP%2BSDnEhMOuPoQc58Emgws1q6ZGFOMrx6GlovF%2B%2BIHAFLXDlF4YbJU%2BRDQu3bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335843d385699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"18289d25b85c2c8b5ec2c8c8ca04728d","sha1":"a45917802a93537107a857fe6bad9a2a3f48661a","sha256":"6f8798225255d935eaa7a23ed1a9189583944402ff14a6e5d6011d65af4b3bf9","sha512":"9ecef87f4b09c944e8b0a74aedb86a30e08407252768f7c9a4b42dca3cefbfff0c5f7cdec53d5f36b6b131d084848f716985c9581dbe63284d4ea284674dbc33","ssdeep":"","tlshash":"dc41bc885bff62790e63363f976ba79c3a328057380aca313a9c0b441fe01641d57ee0","first_seen":"2026-01-30T18:35:05.708214Z","last_seen":"2026-01-30T19:00:25.372217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/favicon.ico","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15406\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: \"69765d09-3c2e\"\r\nexpires: Sat, 30 Jan 2027 18:34:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 1523\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYKqZGKZVo1jys5RSQCp4RuiguaIuKorAcVrqYXv4MuWQt%2BFpXoJD7Xeqey%2BzIp0iuAGvfacFFaB4th8DIJdqXoiyOtBgUsqummYyDo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c633589fa195699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"application/octet-stream","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d68595a390d68e41bb5b90af601e0a5d","sha1":"6dae7102095be9536066ea9c7b3e0cdbbb7ddeee","sha256":"f0b49cf45d9f07275370ef61fe29947501a18665ad3efa9f42dd20d7d006b821","sha512":"9a433fa70b9b83062d8d421e13c112034c536c7c7625decab6e3aa757030034c108f856ba2883d68a6883ee82ded44332a1b25cd03fbb3678d5ea6b094365ed3","ssdeep":"192:Ucsthqg6WI00ztkuCjWfzCck0YsHoTJX4NRNRhAnUW0ziOQYMaE:UccqPzC/yf3YObjeLFOQYM","tlshash":"dd627c123680c164edf917b4e25b5899aa967d7fe4a07d46387cf1260f3f221942fb38","first_seen":"2024-08-19T22:50:39.345236Z","last_seen":"2026-06-22T09:53:43.987961Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/logo192.png","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 42395\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: \"69765d09-a59b\"\r\nexpires: Sat, 30 Jan 2027 18:34:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 1523\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeflXziHjSHQ1MPcIM97vFg6VkjntgA7Yn5omBKTSvkEZTvXloTNkT4tk0VVQgiqZNBJs2%2B3tJVsX8%2B6WgmwoMxSTo9j5QLJplEs2xM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c633589fa165699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"805985de3ef9fed15372cb91beb89583","sha1":"f400803c387b472180d583dd8514940f967702ab","sha256":"038b79cc72b3c0c18375ba41737e56cc17cad9e1610d678a673eef133151811e","sha512":"70af1390c49c3336574c18e95a4ec08ada34017a1863166f3424c5cff1a0babf92ed76cc9ef12c4b78ec40dd7a0e773e4e7f15cd5e6d2ad0c341d956303e90bb","ssdeep":"768:E3avZWiQUD6joIt7zDo1buLiA1P4nESPkHki7cUjV4NlZ7zAtXCKAnQaQ:7v/WzzD0Gh4E+pgcUGfIS6H","tlshash":"f81302c0b0379967a2a0901d2b280ee46dfc732dfdd9194b792358c94cbf59dd866b12","first_seen":"2024-08-19T22:50:39.342003Z","last_seen":"2026-06-22T09:53:44.047401Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 18:59:54 GMT\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-08-11T19:05:20.565073Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://astrovault.info/\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c63358ebf425696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/roadmap_final_override.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/roadmap_final_override.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 18:35:59 GMT\r\netag: W/\"6979058f-67d\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnvsWePKyDUo2uMfOAemZwCw1Dqs%2BOwE6oSoyVmkqR5xYulEcWwSIQmVIkO%2B3N%2Biyo0BqOjHnh0m6PrK2Q%2Fe5AqE1r1Pm3SIeUBcloE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335843d395699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8f5f9df059be21e03e8eaa51bbe8c331","sha1":"6e17dc4b6d6419bb2060364448e168d37ed58fc2","sha256":"5f2491435d08d3802f10af4c57d69f6a172c15d007366c4288816c4eb3951007","sha512":"a0208f60ae33c522cf4d38ca9946ff064b2af3434e3350c970d55cbb8c92c74cdcd9b577400fe167b7af638ef286e59d5ff963ecb46fd09b3d2b5818bcae361c","ssdeep":"","tlshash":"6231fe5878bf60639623e13eaf6f7508b476816f3458d9223cbe49812fe029527a7cd0","first_seen":"2026-01-30T18:35:05.696218Z","last_seen":"2026-01-30T19:00:25.37644Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/assets/telegram_logger_v3.js","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/telegram_logger_v3.js HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 18:59:53 GMT\r\netag: W/\"6977b9a9-3b0a\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8QVsUDyh51iuZC5I%2BSOALV6Ij2%2BZOcBIkrSO1UqYCVZR5TeKWx7dfFq8RgQMJYK8o9m3GeSElbTZctXm8EBgmAq5BYD10IZunW2ld0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335841d245699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15114,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2844b8414a0519fad850b18ffb04f8f4","sha1":"a7717face865a1d037c5740c257bf833f87fc203","sha256":"016da0e4a9a2eeeeead31c5b15268143c91be7d2ca3458261c3592dd57f77a07","sha512":"1983660c8b3c9ed36a45152106c116a1be30a563de13e2700a0632edfc2076e7a92c2ab2e7fee85ef1759a8808881da419124fc86e22e12c05732a0354976818","ssdeep":"192:k13HieVdUixJKdX9LjrCi7BiOpiGyN1r43/piDIC/AzZi1vuP7ayLHpXYzeQtmVr:q3G77PGrFFeroDtabKZuBDN","tlshash":"b86240a916eb2611467371be0b1f62042032a467360ede74bfac87417f9523cceb5b99","first_seen":"2026-01-30T18:35:05.687371Z","last_seen":"2026-01-30T19:00:25.377721Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-01-30","alert":"Detects file containing Telegram Bot API","trigger":"astrovault.info/assets/telegram_logger_v3.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"astrovault.info/assets/secure.php?req=ping","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13263\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: \"69765d09-33cf\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvpjKdjlxQaK3rrEKzTJADm2gTWcIVgOwqWzhpJ28suVFv42HnHD%2FIanWOOvSbdEqjoYRJzio55iR5FJc7hOw6TunC4lo3hwmkwQrVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c63358cac4e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13263,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (13257)","md5":"1c925167dc939ba7920a7b978a42b65d","sha1":"9b4d27462d3d897552a996e85fde3fbf24283df2","sha256":"0da07b458e6aeb7e396730ce0272d86319a458189810252b1a99ca689f765dac","sha512":"f09322f748a40ff5aa579399a7a7fef8eeca5c81c193eab15cea18d0c3ae30ad34719cd9aad64674575ef05cb185087dd43ab9a9a38340ce1295255a34188101","ssdeep":"384:CLpx+D3MQZuRAxe+0A0C2A6VR0NBfAqRq:CLpxQMnRQt0C2A6VR0NdAqRq","tlshash":"735230702582559b789e0dc7afd32a8e71b042e74e0f7a8f8e3839d9249c259c14dfe4","first_seen":"2025-11-08T08:53:34.56198Z","last_seen":"2026-08-09T03:42:01.535546Z","times_seen":120,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-30","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"astrovault.info/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-30","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"astrovault.info/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/mc/asset?env=public","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /mc/asset?env=public HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nCache: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nratelimit-policy: 500;w=300\r\nratelimit-limit: 500\r\nratelimit-remaining: 498\r\nratelimit-reset: 300\r\netag: W/\"9426-CC0Z3XqhlwXmj3pU4LNVLTvqkrY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X07uFgKQU04paPB6e2pRODdjPkM%2BuPhQL5%2BPLWKjyddsVYm4ebk4uwXvYOtWI73sssQyDDOAc5U53ULfYTCbmKXEBp7HrgzIlGOU6%2FKUsB4%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 9c633592b94d5699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37926,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"19fe62e0089e55a228918548f375ba50","sha1":"082d19dd7aa19705e68f7a54e0b3552d3bea92b6","sha256":"f5f1430ccb13d26f96f63b5471771c876daa05cbb2f08fb41592d111d74cedc4","sha512":"3d5b07d45fb10cf637917d45e0c2368fc2782ca84b0b5d09d3433ee7d43319fa4be8445f7a2e552d04af2a80cc476aeff5dccd9146cea901c0daf4b47db55e17","ssdeep":"384:KGj4PYoBHu8Y2YF+HD94774hG0vj3j05KwH+Gc6M+8OIcEG:3j4PYCH3YBF+j947kh3LtwHo4IcEG","tlshash":"58038669421dd5fad307a291ccf66ec146e5ab92c6a0142cebf80f3c61f4dde072a523","first_seen":"2026-01-30T19:00:25.379957Z","last_seen":"2026-01-30T19:00:25.379957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/logo-axl.d0d2aff65fc25b2de25c.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/logo-axl.d0d2aff65fc25b2de25c.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: W/\"69765d09-5e8\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54GuM8B0ZOcObXPXyGXVF%2BGX0SRGDwC738M1tU2oOU%2B%2Bpk1fgH%2Fe%2BmxwrAs6%2BGhl6k2T1awkrm%2F2gKmsB9XnXtDEVZWcK64Die%2BV03c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335944a7f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1512,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18702c99ccbe50cd28e69be7ecca0984","sha1":"1b94b5bf064e913e7b540ab4480df5bedd147cd6","sha256":"c446e6b3184abe3bf8f5e08ff15a711d0006375439f50a08f990d8e9c78a853b","sha512":"c755b00f99bf2f22392c6cc9b496e3fea5f5cdbd18885ac35f9e33c0138aa46888f80f5fbf8efdb760a0b33ef8fb19dcb907722479c5091d214105e996d01574","ssdeep":"","tlshash":"663100d0932ee6ecd188a374071dba78122674e6bd3886591bd15c277d0106f19ee8c8","first_seen":"2026-01-30T18:35:05.710149Z","last_seen":"2026-06-22T09:53:44.020929Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/logo-atom.6ce8f6e5db37f17c77e3.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/logo-atom.6ce8f6e5db37f17c77e3.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: W/\"69765d09-16f5\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdOvcJ4TgEc6XU6WMNWDAZW8UvlUodTgqSJHt3qkUMw2tpxZN2zQJYjVYY60elnmMC4rYKjRAnoiW9tsOBVumLpzeakX5yB63Efg%2FWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335944a805699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5877,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55242afa8cdd2bcd35782e3c539c7f02","sha1":"94c63596c21ee97c7627f3920e3283924974adf8","sha256":"12198da97c3dc49b25824cff0398bc32ab4a8188c50d58ee888b9e22232298ad","sha512":"3bf4163625c6310214c52d709d2fd61a546100bf753d07ebb4cab53407a9f845d7af584d286b59d8217c662a950b4cd18b8e78efed078801c677f36310f817b1","ssdeep":"96:8BPa7mmFB/68GM+JFG6A7iLhpYJiOHHyGHlWqbP9Ngdfyj7f6Uqp:8NaFx686ThqJPy4lWupCvp","tlshash":"11c1acf6c354e1e1380f86b4dd3718b6351778ff9a81e4882369bd11d656da88b18ac4","first_seen":"2026-01-30T18:35:05.681934Z","last_seen":"2026-06-22T09:53:44.024195Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"astrovault.info/socket.io/?EIO=4\u0026transport=websocket\u0026sid=Z45dSf5ZAS5872UzAAH0","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket\u0026sid=Z45dSf5ZAS5872UzAAH0 HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://astrovault.info\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +bKT9aEEkwPunADptHRLEQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 400 WebSocket not supported\r\nDate: Fri, 30 Jan 2026 18:59:56 GMT\r\nContent-Type: text/html;charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pBaSQ2aw0avhnaoA%2FXAHFitdV5elgAnJeCv9svTtm23oCJHuZ%2FEuDQzJBAHJg1k5YMhHG9gUoiNlYp0Q6jrHupEle%2FrPWxw472E3kAXij5BrMYuzUY4Hp%2BB4FrADTknwwFA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c633595ff94b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1900\u0026min_rtt=433\u0026rtt_var=2960\u0026sent=6\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3130\u0026recv_bytes=1255\u0026delivery_rate=7362711\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=59615c7fa6ff95c6\u0026ts=256\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"WebSocket not supported","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T13:40:47.774503Z","times_seen":17856059,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":40,"connect":40,"send":0,"wait":235,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/socket.io/?EIO=4\u0026transport=polling\u0026t=8zgnf7k3\u0026sid=Z45dSf5ZAS5872UzAAH0","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=8zgnf7k3\u0026sid=Z45dSf5ZAS5872UzAAH0 HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 Bad Request\r\ndate: Fri, 30 Jan 2026 18:59:57 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FxlBceTANGlgSnoHtUOh0hUpa6ZoPrjnb6VraPCX6tRIENAfA2TvqMLp0jYC%2FyH5Pt0Vk3lhP%2B4RqjUsrxLh8j0D2OJxAVEGnyUR79lBDE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9c6335981da25699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"64e1c1eb9f4caf0cf0e7484d7afcedb9","sha1":"69e40d8c48a866a84046fd8bd17af47ff02b79a4","sha256":"8acac48bc106c4eae580c08071597f9dafab96d959deff65bec44514da907b1d","sha512":"f109767d57e85127d18b1ad2030a48c0ead69f79a15c4008712407b1f62691654b74c9d6e225ffdc4a922847eabb928dc7520a656c7081b585124cf678b54e59","ssdeep":"","tlshash":"4590044401053c7447075005f07c575d017dc140547533510d0d433cc3005c40313131","first_seen":"2023-05-09T18:41:36Z","last_seen":"2026-07-24T05:04:02.310931Z","times_seen":272,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:54.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 18:59:54 GMT\r\ndate: Fri, 30 Jan 2026 18:59:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d4e6d79c776bf8fc41c61de47e83d957","sha1":"8bc1ade7d4f4e91f3caa6d459dc1c6e3c0b05528","sha256":"fdaed61fd01a57851820b356beb641c643c8b4e699faddae0b72fa64c5d20bad","sha512":"7044230275f8f8d2e4725a69add094387aea08d50c588f7026b9c1aa00f4e576abae59e8bc05b3eb58f8601bcdee55a9ca9508200e51f6121b8a577bac04c82b","ssdeep":"","tlshash":"1851ddd5052bd040eb931cc233cf7e36ee0f21266495d8699efe18d4acbad664351b4e","first_seen":"2025-09-17T03:18:47.287526Z","last_seen":"2026-08-09T03:42:01.518115Z","times_seen":758,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/static/media/default-welcome-dialog-bg.a968c3c3f6458684159e.webp","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /static/media/default-welcome-dialog-bg.a968c3c3f6458684159e.webp HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 168672\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 18:12:25 GMT\r\netag: \"69765d09-292e0\"\r\nexpires: Sat, 30 Jan 2027 18:34:32 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 1523\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BAr0CZF2enNXlgTyGZfc7WhY3dCIUV30kLFwIpscVGfAI8YYkFSSlT%2BVxoIZl7ADokmQ%2FNjz5b2UAVfhCiviAPh0Bl9KB1qBBI3pCg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c633591e88e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168672,"size_decoded":0,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image","md5":"956d00d071e8be103b41d598568f101d","sha1":"51d67de692a524112944a812d33872a6f5919b8c","sha256":"737a9f333b6ba04f5ed5d29de588c37feea704354d0b07b6c655466810fb1640","sha512":"c6379fbce7aac40d6b1f24d40bdb3849fa43f388892ae9441eef162f66c6c86fa3692fe49314c0f9ae1816e610648affedb6b8cc835f8bbad3420f8456f12662","ssdeep":"3072:63Sd7xbBZl/n7UfzzrYk+EERmjmlctRB+0dQzlZOng5Pmn:638r7UbgkzjmitlQzIgNmn","tlshash":"6ff31293e91020dfce38656df23cc8911ef50607ceba59588f9b9a5a33593f7c4094ae","first_seen":"2026-01-30T18:35:05.672634Z","last_seen":"2026-06-22T09:53:43.995983Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/61c31e2a5521851a2b8f1b31e1502256d49e3e45.svg","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:53.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /61c31e2a5521851a2b8f1b31e1502256d49e3e45.svg HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:53 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Mon, 26 Jan 2026 17:14:24 GMT\r\netag: W/\"6977a0f0-7b\"\r\nexpires: Sat, 30 Jan 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\nage: 1523\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPskzXiYPb4YbVFLpfj3uqSRDMz4ObsVU5SIIwoYqBpcuHVpjZhZYEF4GVumChu%2FTf82OV43lJlCug48Gd2P%2BDvZnkUdgjfdQDRP%2FZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6335843d375699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9205692d8c4170855c7754735c0db193","sha1":"174e50e2a2fea4ad762ceb01b36266b669f72da9","sha256":"7a7987b3a3b990007dedc9add2114557e2e3013192cdb40ab016c5842c5d0bfe","sha512":"4e29d55a6660d6a5eebca65dce88b3bb6106114a2c9ae639fc9d238db199a925eb9d0151882fd8bc7d9ae096ff67c654b88e431fa5dcd221bf22d78237466362","ssdeep":"","tlshash":"3bb09bb5910c5c15c55cc51517b66951238fb05582464659f1801f1730044f73cd416d","first_seen":"2026-01-30T18:35:05.695389Z","last_seen":"2026-01-30T19:00:25.387312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/mc/contract","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:55.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /mc/contract HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nContent-Type: application/json\r\nCache: no-cache\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nratelimit-policy: 500;w=300\r\nratelimit-limit: 500\r\nratelimit-remaining: 494\r\nratelimit-reset: 300\r\netag: W/\"1931c-EFZOfzJPiy+NgxSWDIG5dpK+L88\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGBfvF4VMbFIi8BQsLq6CbftgB8gWjIk0d5RSPh%2BX1x7xQz%2Brv7oQAfsRF4IsE1NlWzFBojg5djUN5bAW1O1TElPdi8KAka7FI%2BYTJjzcWY%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncf-ray: 9c633592c9535699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103196,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a12c2762f3fcfad16f45a4229733e878","sha1":"10564e7f324f8b2f8d8314960c81b97692be2fcf","sha256":"0932083077263ffa7dde42671f5cb1934d4a68165601f92023a34823ee407ea4","sha512":"28e6511bb190cac90e560acd1cb5052a7fe15c5b607ece56d3d4c3fa307157a0f67373d35f93b8acc6b936336277b83ed2a7b68a36d5f51e1bece7c46e874e72","ssdeep":"3072:7gV9JhWRHB0q3CJ/O2xhjIgwzRPt3SjDky/ivyOPAOgXqk3yDly2Y3bnUafLu:7gV9JhSBb3CJ/O2xhjIgwzRPt3SjDkyM","tlshash":"c7a3d61d005bbabe8691e641c8bb6e0155c57de291f06c34dbbccd0c81f99be6e9243b","first_seen":"2026-01-30T19:00:25.388388Z","last_seen":"2026-01-30T19:00:25.388388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":940,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/socket.io/?EIO=4\u0026transport=polling\u0026t=8zgah29f\u0026sid=Z45dSf5ZAS5872UzAAH0","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=8zgah29f\u0026sid=Z45dSf5ZAS5872UzAAH0 HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riM5YiCPUeujp530Uhy%2FmR7doWhm4vRDu4ilRZUOGMU%2BqqTEh08KIp6ysYM0t3EzCoXFpjB8zv6DTl31V%2FeWO0FMp%2BMtWS%2B45w2VnAhzGzk%3D\"}]}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-ray: 9c6335958b7c5699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"920ac6baacf07300a0a56dce47f3717f","sha1":"1385313b9d16c4bea02019117e5bdedd422eab0e","sha256":"d63f95c8cf4632cbc9e903284e0846a78f7402f6478b87cb294d8073ea131a53","sha512":"9e9cd378412fc1076b401c3cb1ca17bc338fa3d1b9d13569fcb1f13939c7362009ccd0732d62cbfd30470f0c28c27eda75ba0ed68ffb5eb08235ba5871ab4c46","ssdeep":"","tlshash":"bba022a8bf2b00082082b203e8200202303a0e8238023e830002b0cc803c8e02033200","first_seen":"2026-01-30T18:35:05.684695Z","last_seen":"2026-01-30T19:00:25.389738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbsfoewlknwkpew111.live/api/ping","fqdn":"fbsfoewlknwkpew111.live","domain":"fbsfoewlknwkpew111.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbsfoewlknwkpew111.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 22:55:32 GMT","end":"Fri, 24 Apr 2026 23:52:04 GMT"},"fingerprint":{"sha1":"D3:F2:75:B7:2A:F1:2A:F9:9C:76:E2:03:5B:61:3C:39:C7:58:E8:0D","sha256":"D7:47:0C:1D:BA:A7:EA:DD:AF:C6:0D:11:B3:A5:C0:27:30:9A:70:93:A2:92:40:45:26:5F:1A:98:CE:12:74:C0"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: fbsfoewlknwkpew111.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://astrovault.info/\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1AaKVlf6DSt8gB4dFj3K%2BDQfjbU2QhYp9aSf1Elsy7P7chXilKtnJaqWyevN1EY6KGBLxKVtRk%2FuVW9iMdzW9DVrGqxq0JXdxtwpXpgvIiVge4smw%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c633595efde569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-08-09T23:31:15.864162Z","times_seen":842,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":59,"dns":29,"connect":1,"send":0,"wait":194,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"fbsfoewlknwkpew111.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"astrovault.info/socket.io/?EIO=4\u0026transport=polling\u0026t=8zgnfrdb\u0026sid=Z45dSf5ZAS5872UzAAH0","fqdn":"astrovault.info","domain":"astrovault.info","tld":"info"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://astrovault.info/","date":"2026-01-30T18:59:56.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"astrovault.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 11:44:04 GMT","end":"Sun, 26 Apr 2026 12:42:43 GMT"},"fingerprint":{"sha1":"42:35:37:68:9C:97:69:97:EC:EE:30:B3:F6:54:64:D0:EE:A2:66:1B","sha256":"13:89:5E:66:81:07:FE:C5:09:2F:9E:15:73:63:46:AE:AA:48:C9:1E:FD:F5:D8:3C:84:3B:43:BD:BB:82:01:16"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=8zgnfrdb\u0026sid=Z45dSf5ZAS5872UzAAH0 HTTP/1.1\r\nHost: astrovault.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 1\r\nOrigin: https://astrovault.info\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://astrovault.info/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1,"data":"1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 18:59:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://astrovault.io\r\nvary: Origin, accept-encoding\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuvdQCzf8%2FNNbwruMAHEVwVzgyAsYaLL%2B3u%2BaFTazWaS530cx9DkeNpuAo06pXFVvKqSa7q%2BdvruoHhj97Kv8ZakfljmeibRFBA6kWczxQE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9c6335982da75699-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-12T13:35:43.713265Z","times_seen":447946,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"astrovault.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}