{"report_id":"2ef6b61f-cd94-414f-9945-b255b3438df6","version":6,"status":"done","tags":[],"date":"2026-03-12T16:40:57Z","url":{"schema":"https","addr":"help.ipsconfirm.com/profile/ticket/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"help.ipsconfirm.com/profile/ticket/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"title":"Support Ticket :: Wero","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"d37fd0716c5d66205c453e419ff57b3f","sha1":"78934424f12ddcfaff4bf23587b923de7ee87d73","sha256":"2bdbb9311d0afbf7cbc5fcc4039d7434dbb941a89dde67b6106dce9613ed0871","sha512":"956d8d99dc59f5a58ea54dab8acee4c91d2385a8e5caab5b07f37fa61abc68dd510b22b04ae8fafbd571bfefcf62c6c92811117de88694cfef63591deae063ba","ssdeep":"","tlshash":"ece026ea1c75c83468a8128a20b5e39c166461a0b711d64442d9dc7b9e20fd38ca2988","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-03-12T16:41:03.536255Z","last_seen":"2026-03-12T16:41:03.536255Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"help.ipsconfirm.com/profile/ticket/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T16:40:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"store.akamai.steamstatic.com","ip":{"addr":"23.36.77.112","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":150652,"first_seen":"2014-03-27T00:59:34Z","last_seen":"2026-03-11T21:28:38.448506Z","alert_count":0,"request_count":2,"received_data":4566,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"avatars.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":84588,"first_seen":"2022-02-17T19:50:57Z","last_seen":"2026-03-11T20:17:34.852281Z","alert_count":0,"request_count":1,"received_data":3081,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"help.ipsconfirm.com","ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":8,"received_data":276115,"sent_data":3958,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"help.ipsconfirm.com/profile/ticket/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c86e5572d410a2acb6ed852608bee9f","sha1":"935868649ebac8e3ee815e1f44b1f5d94130bd00","sha256":"4f3d6e0125c6afa127f3655957c9130412ef5fc0fae53d5c7045910009a6ba3d","sha512":"525bfb643db5cc3ffae5ee1d29e8eeff70c06bf92d06c849efabc2f9439e6c2f11c7809ab7bafd6514c2da5a9ec67ff7dc045af05368facd45e21f67bf31a16a","ssdeep":"","tlshash":"17314f1538471cbf86b2527d68945ba62db10887aa83f870e0dc7d083599ac5f9a3ed3","size":1634,"data":"","first_seen":"2026-03-12T16:41:03.559946Z","last_seen":"2026-03-12T16:41:03.559946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/script.js","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3a08747abd8e965ac765a8de9c4df74","sha1":"5b37669c67ef55ce9656c7072ddb075bada78a30","sha256":"4318339fe5a1655e7ff642d1bd933d6f8d8203deb45f14d0ed3293755a4e9425","sha512":"dfe6d47634a53259b50025a49bfafad8415370619308ff4b2b0064704b9d2c5d37b6e77cacf8851172df4626797f58e91bb8dd3c7fe0fa7c2eea518771add15e","ssdeep":"","tlshash":"d331ab6b1e51a41c57d35bd31b2e20ced15eca9a3eec8d12a230f8b23854610c193bb5","size":1784,"data":"","first_seen":"2026-02-25T17:59:13.265137Z","last_seen":"2026-04-02T14:45:48.458965Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1cad660b5e1e24bbfe941ed169177cf","sha1":"3ffd504d51a635b6e114c23ee320a797dd767d08","sha256":"c552e62327ee44f83c48f67297b97c6715e68ac56e1ebd73a411f0bf9674b331","sha512":"eb3447b47bee581524d2d7fe8226dfebe9f2288fb8fbf8f6f20233f2d3606230a1272c4192df6127d30c5e3241f92dedb4eea2647b7a4dfbce83d07d9df2679c","ssdeep":"","tlshash":"69d022aa1c75c830659c024b20baebac66a120a0b712e24082cdcc3f7e32ed344f599c","size":217,"data":"","first_seen":"2026-03-12T16:41:03.562426Z","last_seen":"2026-03-12T16:41:03.562426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/profile/ticket/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a782a8ef2622e4f2d7adf5dafa1d6af3","sha1":"5ae9eb5bbf5f57fee7de13ae563c10d8b22669b9","sha256":"805eff87d9488faa2c7f528a1e8eefa2db9bc8733f7df4179c47ca4b8636fd44","sha512":"0624317add8651000b70ad4a956dbf96ae90ffd8a06585d5219f64f8438734f25997fa1330ed6b9bcf0fd6f852a1958bfef63ff396142d04ea32d514e3a7bb55","ssdeep":"","tlshash":"9011c0753a2a5534c9c9818b317eeba93d3260617b029184c3accc395d68e8714efcbe","size":902,"data":"","first_seen":"2026-03-12T16:41:03.564207Z","last_seen":"2026-03-12T16:41:03.564207Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0149dd7ce80a99fb9bc5315eec48d8f2","sha1":"0db78ddb221f0ea91b61fb7e964f11cba48bc7ce","sha256":"c57b4135855a480bb1f08823d35c26d1127a504dad310f241c3c139660f46fc3","sha512":"faecb0db0d2c0e097d199c02098a3f48cef5a6ffbfd6fc9a7c13560ba6ea00e76a04006622b74143548b29e79cd41f965f6bb65a565263ec9a876dc33c688ce7","ssdeep":"384:QeOQrwTMswuYNF+/q4QFGve/+f7b+Ricpd0JzrX1IMj1IgF8L4VUxy4HJvsUUnY:QeOQwZwuqFAXw+f70mxPR7CD7HoY","tlshash":"8fc2eacb39c8726a937590a3217776dfe2befc8874046e01c121d7f4786a38568b7d98","size":26451,"data":"","first_seen":"2026-03-12T16:41:03.556056Z","last_seen":"2026-03-12T17:30:18.674383Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"help.ipsconfirm.com/assets/background.png","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /assets/background.png HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/profile/ticket/76561198168115188\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 161187\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 13:02:30 GMT\r\netag: W/\"275a3-19c9a0b2ec0\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyUKeD6wbhAdKMfaW0wQF9LZo04S4Hho16DDRFsm6B%2Fr65y8u8TarKqjlJp9olXluhkop4zstCC%2BaIKktelgtLocFkcmcsh4fqfWbJ8PTzu1M9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db43ddbfc6a96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 800, 8-bit/color RGB, non-interlaced","md5":"1d7363064d454b57f9c84df28f566ce7","sha1":"773b8a0f0c6cbda10b0c2ba62fb53d323946e311","sha256":"f2f4d59a808653e110b074ab0dc600b249e7451cc609eeeff3efda1e32ccf7d8","sha512":"f8a9e4c39d6c3e12ad9d01db9c0318fcb82b5dbe97b57ca6576a482ce157f456786752825e397122ea45fbce77e6c3cf62a2671c1973e40dcbf3cf26852cd49c","ssdeep":"3072:bZ9L5Lw6SelSTdibeeotIIwQTHchAMXBDjLjtFzVEJJU:bZ99w6SelSsDomIMxD3jFEfU","tlshash":"9df3237b1a3664c2db1cfa3b7ee354a104e2c84339c440e49c0a734e696b7d7966a7dc","first_seen":"2023-05-01T09:45:50Z","last_seen":"2026-06-11T00:43:05.669078Z","times_seen":182,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/script.js","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/profile/ticket/76561198168115188\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cl0aOKEl0mLtCvhHfZnb2GgkxPlB3%2FkkiiYqv3YCMhX2Ko1bU%2BBKHjKokl31QY3e4DqMk9qs36Lzj8HUy4N0cqzRdkCS2m3lcGzOKgIs3cnxpO0%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 13:02:24 GMT\r\netag: W/\"6f8-19c9a0b19ac\"\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db43ddbec6996b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1784,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1784), with no line terminators","md5":"f3a08747abd8e965ac765a8de9c4df74","sha1":"5b37669c67ef55ce9656c7072ddb075bada78a30","sha256":"4318339fe5a1655e7ff642d1bd933d6f8d8203deb45f14d0ed3293755a4e9425","sha512":"dfe6d47634a53259b50025a49bfafad8415370619308ff4b2b0064704b9d2c5d37b6e77cacf8851172df4626797f58e91bb8dd3c7fe0fa7c2eea518771add15e","ssdeep":"","tlshash":"d331ab6b1e51a41c57d35bd31b2e20ced15eca9a3eec8d12a230f8b23854610c193bb5","first_seen":"2026-02-25T17:59:13.265137Z","last_seen":"2026-04-02T14:45:48.458965Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9db43ddcfc9896b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26451,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T14:49:10.846265Z","times_seen":17800640,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/assets/favicon.ico","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/profile/ticket/76561198168115188\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BsvPJXBOlVifdUtb9Zh189IOv3P7xiNTb0s9CBL5MBoKm%2FRUd2xgWXYwAwHb9C8rY9tI9X7kIXQSPWvJKqmgqYLNl%2BSAgVpVZVg0KDfiiqmYt4%3D\"}]}\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 13:02:29 GMT\r\netag: W/\"969a-19c9a0b2de8\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db43ddd9cb696b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38554,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"231913fdebabcbe65f4b0052372bde56","sha1":"553909d080e4f210b64dc73292f3a111d5a0781f","sha256":"9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad","sha512":"7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919","ssdeep":"768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh","tlshash":"70038de82e4917aee9e2cf324adb6716237b4f88c0bc169742b07f193175a51c6d78c1","first_seen":"2023-04-05T07:02:49Z","last_seen":"2026-08-09T11:19:58.053793Z","times_seen":6885,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.58633424944571:1773332795:4Y3200VcJfMzC3uCJ4Wj7ctYrJrh6-aBX5SghWMX8zU/9db43dda6e777dde","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.58633424944571:1773332795:4Y3200VcJfMzC3uCJ4Wj7ctYrJrh6-aBX5SghWMX8zU/9db43dda6e777dde HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12194\r\nOrigin: https://help.ipsconfirm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/profile/ticket/76561198168115188\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12194,"data":"BbDNJo8vP4h++eW9DesZhdNhWr+8XwDr5NlWhTrF1iPu9dMWh0D1CrhNiSd81C0rqNjB4rWUQ751B9dP-049dr1wwrrWZra0shErvqrb0DhnA6P7r3dEIhC9TakridCcRbD1OoJU9+0r82eRF6PYNhsVBUPMo8-p$br19jlDd9CwWDUvWDErhIPVj$-XOdrI1C+Ct9ENSgjX91WrJS9rjbr96a1r4FcHJwNJCc3-JcbiWTUVFQWrJilr8bhvzpqPQpRrMCBoywwDKNrP1d1WpkNrJ6WRiZNoZDra5koNZvvPbiWrl2lW8U9C9w1kXMPkoNrZx58lR3err4Iw-NUDMNVJNTaNN8s2dry2okNrCverqWl+ikNP6eXUX4XW0EguIgzP1iU8pfVz5J4UbJ52A884m1rrzJvNd88w6xJgtr8PjpQ-4iU4kdJixX2mJ2hISJB2AcQrnf1Drb9IdrNUStyOQvOoo-frPU0mllsAo$M3A1Ec$TxuVw$96xWFARU$4c9r4zPmusWd+UFBuUrrjWFGMed9vdaDyPhSob-Pxdg9s5RHK47Aov$WjahxHs-hmNqzzKK3c2CGyCe6yfr8km+Iqz0Hc08Kw5Tx5$RbF$W7At7RrzotHhDHcI4KWN5iEmhBJHQmNE9N0KudSM2dG5sJ5yzR8m2bh-QM9fyb2BDgnccjzE8yBIGw-TYl8ZhJpHUVVw43CgX3rXBrwvuxii9kdA7qRN93tAhpuTx1dbRwcDPH0Ee7bAfGBTK5iR8sOJWvPDp8jrr3RWkdlAZldIhkvSXi9DHuejSR$RZ48qevuUVPpWwyUpJCCp4Ikal4SB4umlCQPlIZkr6DUmhDJKq9k05mI4PZ3P4p5q8oldsMZaNXhkiZN57iZT8oBN7jXDDsMb48S9lO5y8GM3CMW48m4lvlMx5DsdMeIloPlfJW64lDkeEzQ88lpbgJGqDlzv658lwaZkh9wJ8xyrbr+whNoP4jZWnIC6s8oTuy4kvSyrbu288fFFrtEkdX66fWYheyD+re6W2teq8RZirZorZJ8bzDD6UBI76Zw11WXtslUrFTnkX+XlIb2EnFsNb+G9G4PNTlwAQTDT$SElwXIMDyklIhv624oyDa0xDAa8ZrCkZdIkMfCdZz5pN+8DDNCeW4JX4y0MbvCQMwf4vSD-57uErbMSvnZG47PDelK8l8NAokW$G3yObIf21$8FW4N7hrvl-XQZkG8R5F08R9Nrarw2GvlwzfvGnr2S50AplszZUJk8byhxkCeJu7UBfkDUPf5TS$574r9FC98o5-HZ35P0wXhrMSI974r7MTPJU9wXjQh4pz4NXGqjr5eI9wXns3M4OMZzf6IkgrPXgmKcwXMbfdkrXjJg+k0wsj7MAEP4r9A64zlY2DjXdhIFsHP4DM3M88SASrp1OrDzrHak-NyhaNA4MjAC3MeAdAFgKn0bB7OEbWli27kDMmM4MdA$$EmSPCCWc7Vavcb2ewcYjMKSjxP5DoFt0ysp6$X2rPxzonbYagu+hFH9DUgECuy$E4B0RJOTy$7khYUY2NG475ONNin9Wv8PNkrZl3rrKyhHOawTVDZi8m3A86kdSN9rKt38rBkfrY8TPvbNlXhb8Wt7JrERWp4jm1wWNxktNrBdbDDSoC5mNsPfXddT18fjllWlkZkxPB22R62elkO8-Z+q+NVBXg+fjR4A$WON1Do86wke$fCi4UJihklD08nUhjPhu9WdI3Btkpz4jb3NxugoTAmpn3ZxKXJF9lIbklTupem4Ixq4kQPuQyixrlms+DKPXjIJ4ADK5$SWl5BPGi18Z1UDil$ii4isecA61nBimCmKGMZj9xiDrP1QIDIw75VC0l11E4UiT0vZzSiorwRZNNj5NPpKFf24CR5WPXmIPN3wsr8I5XzaX4CYPUpo0rBNdBPSyGozlVD8iMJSCR$NedOGKPxP2ndONy9$DcUc+Qzr5Uq8BhzKcXsvwsZu0EhNMDovxlFpGCk8bmqw1F4KBqiZVsd8k1aroPNGD-Ngwlj7ufxuI9rex8rshoNwTwGwZZtJIObvE8N1E-wPFvZmjqqhMp-o74Dir5rfsFNwUk8Z4A9BZGdlRmCa63BQN$Dkz4sf+s1wWXlVtWzcdlJ3DNCRiEcp6S9djgdPGs$idrIRT0ua1xwS1jp4lIbflHNAB95w7xQH3r68IRK7TiQcTfrnVm6Uo8UqAwqo1GOPKjIu7FmCailVCI8b8-iozUVPExv2-tt0mm5YAcp3oWAdG3VxFIj0dCmHIWNG68Kxdjo+Z0qTXNplSYUOAVhh-lZi9+hxMp4ie4jXw-0i+Q0r3TWKCuD90uhSS1rzzwRlBDCd2HfcQwk4661DdkVMjXBeRcfq4ooZlDPUxqJUGu2o2ROG$Ivc9r+BqCNls7TuCcA72lQRixouWAkStRIkWNPyIwuRWr8hgDWX$a1GfE$z+llsVDFhFI3Drd6qSWfzdsU54ZkjjEbGAp48U4kxa-VukZlJ-eTqVDrNmCw46W7XuHZhGz41N5S59l130qrXEgiNlKhFJTNNKcW8pzPZkjNorUG-dbnr0Eyu+zr4vM6Q4kR7Jbabdjmgo4ZR65IK2AzTBXcS2ekjxGrPIwBt1K2rBD6lphDbr6CB+VHu4E6k98aRSQoNWwzTM-PnrnJR41xqlwVh5RVP7Vkb4BZkM428uS9tXDM8VI+qTSaaZFN-bPXF$wV4rw7r5PVWPtu8DhiYzI0T1l$aTXuzYabrs7KE8ovbQN-joIw4CAbrk+m3MAPYMg9PQ+QRdo$+6ZbiCVBaEq8x-RWbp4WTwVawkoJTIv8rVbItiBOCmjaiP1S9rKFso4hse7FJiuE6-mbo7eKJg10$VpmIm22do94jRHxaoz+ShMleGDedghO82SekwVzeM1SazqNA8NUv5UBm51eyWY8ePEWt$7ldpkHhu30vbid9$gBjisrvM5Gi$9H0Cf+gH6ag4stxMPaoY8mS0r48C6ehVSN2FrlhidWCE8Wjn2v2sBq0fQWZpvZJI6YXkg+79123Gv3WH9RZAyvB88JGwD4YTQ$vq5Dbyo5$4dIp0hTgxg3hlm5WPIW4TtQ514la-1woumSSCdNytIyTd$ct++8v4RSFIm$jkVtzSbYrr$3CCRUncTaCxTnXCdbxYqEfPlsxG502BDcoBv2DZeoFD4xJdywcSMGViRhl23q7Klim1O+Uw$dj8$Tn2lTCZksAQ8RVi5x$xY4iEuJEdaYbvVn0PlusraJ4NuBoGfMXxbdwUew3RPWp8xGwVvVmISnpDTtRIfwTg2jB-J8-dtFdddYOz$wqhWeFftgh99FgEPDz4MF$+FIaghqQ8eJIlkDE1m9fj49Qifg7E2Uja-7kI$TH649-PrwkK-N1ty8rky56ndCmkhP9jeX+D$1g9DK7lTG7cVTocfCVo9GATFT5l0cOu9V4jn$fu8o5zDeWoKsx1nGjcfG4eW5OwWP3otzQ0aP6kwq$kbUQ0hk6AAP9U1sDrC198Dj8MlRP9AwdqITEP6TJ9-e-ekckVDJIdfVSMrsrJ+5eUETe$iw2CoxeeeKJ97AfMu5Ik$1rVf8-rOq61-N4zrwN4MT5lvrWrQqhuzcSGCexuxCWuDhCzl03svx3V1hkPtKPP7j8rKTQ$JUcdCC9ebMS9PNbJMu9ckRkpbXx$rBaUZJNp9swCek$URIfM0Ae8sK6qRDyKpdqcGViNCrgU9zl15codPNtoKcqMJwb5BPKR5lezWeG$+sns25nRUqM0gCR5IA5cxAOG4uSK5Pxq$1hR6w$R3k7pXchsd48A4BDIAKkM9X5rwkICKlopKchU6p-q1JBwW5GP2KW8keeDTdGDRkDTar7I7pau7irjWGxlwGNkxd2l6Xjs+I7$Ae-jZUo1bGHC-80qeBY1cR313$W8ORgRKdYqTzSG01vd5AeP$V4U$UI$8MZ8os29sUhcouxh20mJM0EM9M2skIssZhGVasW1AAtU0IfrIV84kshAJKbA4MnRR$K5usPV8ht1eV+V1r4jow8wdJMRs9hcSBydbz8rEV+U$usej8yJOcRMyX1q6oDr7DPoP1eThU$cS9XhZ89jU$-ThUcdbK6$ioXicd-G5PXDICJcA$QI0RIdVKl8rIbKrXx5QR6NjXjJk8DhpK-JQV8PIilMjl8AWuEqbMWwbGQ5fVjp6KsIwjy8j9Pk+kjhzKWhZ8-jfdWw8AQGV8R9DDg8JAlsNkVqWPVsW5ekxd5IQBoAjh7rrI5lhTb0Ves5kM8k4Pe$bjWCXr0RhIDjEIJqDhvqy8g$i$JkIAWAmhDjRT-ieo3D2I1VhBepyCzpxINREhWPZjqImTQClpQpAGF5DcyloNXT-eXVyrKcSo8$HJrhq9wjnxaJAA+D10$UiJl$MIvoKTuzWezTS0EhdG5h0kKp0wol2qnR9NgDz0Cp5Bsh-8s9oKn45zbTRBwqo4Tz6qURgUzJaTZRl0-wy8ecCGljaJjDrndI5eeBrB5hfcRrUDZuy8kPYUKuIPdJZJkVYBGIqTrDrZ2PWhAeWofpYDOsOsZ+o5Ep3KXAJB8sFDV5FI5V$iBeixRhpdxwXK4lW5BPRkbC4I64txmo1xADN2FsNmTiTAwcn930ScTXEj9+ZlbhRMcB0A2J$18Ve9Sx8Blic1-KMkEKlxEXw21PFKlJEN9pcoFo$4iCrMjMD8Q5v+rXcdWPOc9+8qI01IZj$pCJIGpU3kUo1ApqFNAK+6dBEiz4RC5Mz9lsXD6VEKz41dZB0AKp+Trq5e+NbrvoqR6NCREMmr0P4lFTvkiu3wOc7P9Xgi5Vv94+-98zokgzSkA9nCftvs+G7KYc7nTCsjZskjKUNzwm5Mgs5XwG4MTX7p8Mp5s5KA44sA+U7nzCtJhuqri87hWrWRw8dJz0x5eke+gAjr0hz5kUoNeBousjD8dm8kAIhzc5Pr$93zt1KXjqGk8XBRkPs2IoVGiJnoyjsPoGG5krE4qCeVGe6MZMW6GofnUCP1fUoebt8Ifencu4ot0G9+0pYDIuaIrqGnSibm21dKPlCJ+6F1Ms3$GF2toX0KEcSnuKTCJCiuEI0xbhEsPtOXXt8Mu1eIMMVqRe5Zxzer7co2swfTxXPoEJIuxrI8uwWZNuhKIGi2l6SI79fZDUC1-AgCPx8n79sP75lhoo-UaG3qkepkU97ZHU0Zo43Z7XqJcnDCyjeugcMDjDm6FNx0UAuxW6DZxAPn0pBsKkXU9jRPAD2+eJMkrI9RZPlhe81j-tsrZNT6y2Be4ROCBhi4FN$NBJrn+cshGpZm6iC9WP1B0GpiTA+seercrqkPlJJBVchBep4r143R3Ga5-l1mbdW1HKpp1n4s3CUwSiZBEieqEGg$7UsBsMzGrRnA4ICmxsUZxiUJN6sRfqPeo6Z8WkX8ckKIx5kmBBOAl0MK8I3232-eGthwgxxuYURjxd3FfCI+W9i9PpDG0oupJRFqANjVzIhqoZ6l-$uk4N1cH2oj3M3rQJ5B8GChNDZlKCF5-xRjn1oBwVgsGD4i3DrXQoBn-rIB3DFGCIDZjJfU5l3B0UKAn6ts9RfqFVUCTth48CFtC$18gKymXmZvbxxMK2D6Kk54wlZwPo7njMz9TCyjs$F9nGyM1wsxOk$5X4nz6Ba1gTEIUpiK369I4PUd9WBNZlwIf+fU$IZe5nQCI9jGc5CIsK5VYBzs5X8D$$fMfPyPwVu$JVFFUokw5owM7Wuctkrn8MiD5M+UcA-29r5C-xfGXXrki8owKrRvp2rehZW9gU9SlhzxSKyC+iolX8NRXk7DvOmPCPjGt6847d$xaB-iElMBr-UnunDdIzqm22hB2ZiZS6S60CJnshRr4rwV4+QchXl3NGZJI2e+yTOkgdOAzVawguqDFJ8Rl+5qz$M5ekCsCs4uIUcw8ZOGXJqIniIxeORl4MRtc4QTsKZj5pZZId2hTnYJI1AKDMX5ehvD$2C$u$4iNAyA4Bq29WJBsMbVcUAAaIsBS$JVa+nCwpW$RX+jJoaJZBDlWJyPqAkA9MjNMNPZsK7TvOhDH4J++TVPbo-S+VvP8VYDlXSjpn7$Wl4pQnyGatouYTZ6Dno2+DUNPoG9o5waQr0ilmPTQ$0iGqkv9vmvwemOe3MDUnbMhn4j7tNnSZi6j20K0xNFv+nwgmgni1CSeUEpUAZZCRKr8a6s4hNSDPAZz9BBtiB4W66ZQ3F6NTQOZ+3dZSBF72AGzoKofSAAlAFUEKR8eR30J2ZUMRcaX0cSj6DUwZFnyq++tAf8equz1d0wleefG+W$G1ACFB6fqTQ5ETBdNJcXSnqUZI0o-8-8WXl3Ieb93DcsBiztoCIffPPZtcv2gnhiI4J69aJ2S2BinIf8DUI5uIbsO0fIe-aGzwTWlZ5cFD2MxkXwaphI9+raUtFfbpFUmXOFJsIcM$ixO+BGm9le4O4rHZdBi+l8PlcV+RuDZeac7tuV8haw2UENWMuTboZWbN-rEmkcyeB+VF5hwSqS-lyuht2XJt2fuFIWWrvegXFOmzEhPP7x588Fg07luthOUuv4ovvFnUR8mvk-kO3xk3n1lqSGEkzIxq4h1M4hynJcWOUuqZWSVvBzE-wkQZza0xjtNHJZF5M43ZxGjnbrz42URN8wzwwz75TBeqgnQm76Ze-CJvwpjMxq71UIBzmwnZu3mWr2JXlB7tpRauqWAWwqaC4MJcCzkMlCax1l4abDSCBptJyIDqS0lO0uRYh5YDzXa8kcfPoRtB5PX4S3+-WAVfnfk7VoIFIw1vyi3ot+7vfWsnR2jzjuG3wO1uDXNQ4O4kz2tIxmURTdwUQFKvOZZF-RZAy8MU98V+ESolSwHuC9slnXmUIKR+wU8-1-et3rsOIh4efy2pDCc4-NpXORdtesMjH3NZisiUj-V+WQdFxIniQGTm1u1uFCq-eW2eKDw8VU4HP6GoKR1v8zQ3iGo1R2K0iNXeQN5WZFz+ylGwJnH6jAPmRkwnYp7+wb8SyRMzgzsSdIyMq5ohyw45l69alFpuaI4hbftoCq7NTxB-PIVj6txuDD8OZZt2PrlSP17S4sllhTnSz3s4s8n3nF5G35cuHveR-0dFI-+im7RG-jpaUg60hDRI6wJFvUlPZ3C6xd2OC8Wyb7g5ig4YiHn-8fCPtS-PWCF6w8lF5lvNRNxbFRqneQohm6whR47V3Xr6+3VsMeJ+07iUpp7sCdoOqGRI5rwkJRb$NsT$j3QrT9Pu5MgFKqWmaejPv76tU3X2G8ecgix9uB98uBSqxcnxx87Pwh2K75V6WEJWREysREP96ZwAR7X0VC3gDr7IM0EK9WwSsowOylpWG2-8ERMppvlAAdnIaiaiAG3OJcaJRUI55uIKfvofVAP-h3eCfW$NeGeCAwk68761ZDxBEIinaQggtQrjCFEeuv7YOT7EEzDFM0oH4Bxr7D$ghuHBdI0Bs8EzQbSWAZQ6i2zpbkuE5u176C+g0fwrfilXItodunv1ZixiPez7yrJAIpZgTWayN1wCp2dGa1rbe64DbnbeEhFRPXdwwF8vARzNlbZ7r7BFZlEPI3pW-puU$Pz3ik9EvxorTlWMqf5SXmNolki3GbzNcD1WAeJjRc0CRPoIws381vPf6++owqtIn2pThUar$Nir0l2uPThsZE4uGMmep5XQa8RZ-nzElWPTrlkjTKJz5NV9k8ar5NOE4rivA4PuDQ81kDd8HlcZZkZ47N6qthefZUjx8vwIdS9eedECZs+Nzv93xRlKkxlQNvCh2j+5W8oeWtudS+rto$rZGG8lg9PMG5HiyrMwPoFZr5Z95d5ofvDzDloldc4dVdeDGJTjqUhwldwfD0XjoMPbXZ+4l9halKqTWNdCd$3+94IeN9UDzrYPNXoD6xP65YwBxXANfe9SAZzd-ZvPlfjZhDR1rHTBNINUr5GW8QjZS+PwrurkrZk+ZGBxflnCHyWb4ZumN1IkxG++kE7m4llPqu2ErW4ZvNRroZBEIfkkdB2kKGXxBPXkUZGvI75$Ps7Id$D09BfzUh+5rWvsJQuIjw9GdqllODb9T8OP$W$kBbS+rWK7rZ-xXl9iR1sojCVZkdqWDzeTCdKHPNdodGGh5jBvVZy5-6xzsvNZoQ4fDKZOZdxkbKbPPDKEBRP1bpZGZCDyl-oDyNWbO5PwM0lDlbFKrGddki5i3UIMr5QW5d7IP8dz5UdNdhDtjj4Njea8X9z+vtMbhC6+oTNhy81iIixkhWUkbZtKPv84UDHkCbNnK9qU-dNKmWZr$WfU5qUTCIWeRfB1XjCeSCGs0sI9uAxkMvkosr0lDS9Ptj1vGdkDYM+vil85+GdPNEeiE4+MNKlR2Z2ZXfDh8SCM5DW+4vEXEGavg96dk71dr0P+QS8PkmsjDzrr2odUwkH43S8UqSKD12dV4zqeJZjojydDpjBm8y5K5TruW1l-4M+e6lvrZDCdJUl6jthvwumdbuRJfMiPfy0rDFmeD+aZ+rkEwvMF5xeMroXoJWF3IIi4Pw2hs0tj9z0JW8cK2UWDARCT5KJ+C1Ueb+vX4PfNgo0UiDBvhWweCHCP5O+4nD04T82U$s4DwWa+cPSWrvUa9BohwJVGyCDe5dZKrTxjMsrsrKrCEhDkv5y+NdrlZP0kr5ZQwANVo4ve$rlEzhTR4l$bwZldf8+Mr1bk7u4NkxukNd3wMI2$rTDv29krDi7lDPkhvrKrqWcM92R4osvk5CNzpex1CNzU+94eCollM4rZQY4Fl9ElKe3zfCcsYrpoSN8Roy8CiDrrbtxw4Cxi2i1nMm8qUBg0U89+DjN6wVZ2+Zc02JfwuDjSEmbKrzkaRxNlpbMxfWyOIZlmTFDg4bZql1AlB18ge8A7MkCdJIx251cv0ANOzDSN8NmWgD$Zgr2didIrN7IQPSoAPz+j2C70OrwZhCI4rrr2aZPsMWeT8i-cEdcBketlcZil3ternDsl87ixmyx01MvNJ5sh4NHoeUJbXVP9bYi5sAd3v55rZh38RSuHnXDf9Rj40h8XA8ko+MarHTHaAjx+eIrc4YNlNAdC2lVkI8vGnN1lBpVBaehBN1-CNMcBZ10RUkbwg+v44zdbvrkxcvJFHREM98KsgZmsoGeSN58CCRDGmI1DhPtGVTYb9kPtiir92CCg13sIIpmhPRcZ5Yl9pz8khvUCCtWoSeHJcz471laR6snGREjYrWdCce+OX9cQrNYDXZo6GHIDsooddWDB+0Xrv5eilXEb1lAdh75HiPS5dVvWZj$lnzMDGOP1GGei$kNESsWG4X2P2D$32Ndwzh6b84htrwvl-G9abikD980U4MP-lPebPFd8rGZN4l4rujKrGNgZEkhwVBrw8aNKk42ePoyxMCxrsWC6oiPFjukgDHkdfGRh5ieqWmV4-G2H$ZF1q82x+ghmzjD87qoZS9vdG+Rk8TdzDl7Xsp2l4omsuZPkGfvlUrP-sxUJN-Nhju3xRkDQG2IXdkM+lsrhrpNuH+Sq+NM84Rwvkgjahz9OPpSMovjjR$WxCsINt7BXuhMz1YWZQSHpXWZjZ88q+QMRr3IgBal5C6UDvUmfVBQZcs8RowCbtViG8UUnSMvVdJ2khJtq0Um9em3UhGkuqMilGBshoUXbCiA7G7ysp7xQEmszr9vnXGWrBK08ASlTedjdB72TChQ-Ijd-V4p1pCASmteyv3UINas7Qmtl6r85hD0kgQGNw-zlh+NtrnsU7cTaYIlPk5hSHrd8uxhZsudOQTnd7drmcgIUTQWPk-ar6YJAs7QqlSPNjK+KG8DbF+Edjyuk0Us7QPvoYXV47KUZFvF+kdap4NAR8oyV7T5vh8ZwFriZ-vQ5CFxA19H3+QwJ1D3598p8z+S+VpZDrdfmsNj-8jImVDZ9Y20jfif5fDZtorlXjIyiTID+2UcKAS+4kdDHrRDRINXxeelMDFd0o2OsZoVruYB4A0K0W5oHmz2PM5$Z+jfZH0BMDSobJMjQNOywdFvw-k0bhoRbjvKKomIYjsvy5uqPPuDJpjdGb8wpBPw1S-QBP2Xn4o7A0DR7z7VsD96PAiJ50-vZW8JIxjH8FjwPcZJ96x9aPMrgvOTAe4bomQ4jpvG2zZjA948F+l18dZD+f0Jxh9j+4-w1qnGdB$jOYpXuCRXGdBExeok66qrHN$qc4pG71XWFd0blTf3GtmASPjxbjVwzGmsp7X-SdSxx7stS-Rt1Atsuxz+dS0d0A1FqqrQGnXwdlIh18pDV9pXSAeXd32fbHPUQG6K8GVs7QkD$rrw+isqUJeDdAQ3xzuZRJNuDwPQfuK+598DN74HmASj5uWIdZqW5OZo+m9rq682PoZJ2VXjTCUNr-v1jJNQkvIMiBP+jDG65PtK8ryI1T3PwiqM3ASZ7-Jr$q+NdWtZhI2YoMhzoTdmNXwr0AtD4KvIO5mImsZp5-K0INdZv2Q-HJlNOrmDQkouzV8mueD7Xg9PlAI2yjvd-D+DhY+ohel+IA5H9G00KAj0arOSC6nZ8PFj116DQAoQfGft70UJbex699X1IIa3GH+i651OvVcdmKs8rWMkJ598duonjGpDBS+eIuZRkc++s0OJiR856gD2r3Tdf6H9m6cQO++vr1ZZP8s+Q6ftQ-4PV$ushuRv5Xf1mJuI99QxrBkI0+EiPFXDXfKBA0t7ocFmu46QTD$xJwxqGcQv1tuTtcuesEQHfNcGVJO2h68RDs5tvX6o02F5cvGE3dX$P0K6wN8s5uCpiaNFF2QQ4-c0WrA9vDWCSsnxd62iGpshu8fntGzlOssDHczrCj8bZBu$sIjhf6y0mmt0OIhuq79XrBqOAVqjrF7bHd6tcFJFFuWPTHd6Fruz6ecWPT3C8mNw8JZBAQ-8f8FN0hKlBIPQHv+Zk02F+j76EcAN2Bde6Gchfb5CDZuu9J5bAh8tud2gwwaSeSEg6hDdau+JwcaP73df+b0Bv-j0QO5amweM06Uj8EVKz9MlwK6juwogfNUt9uwa0BPooxwUmwu$F-+PKBmd6+RAfICUP6nCzjoV0+CU4UeNz3f4rRe3Jjfvszv2nKzoufc4G2U3w+kc-IdBXeFUfNnkc-IWj5eFUd5n+c5J9BM19qX86vc8IZB865iSSn4PSJxUAEns4jmHG7oktoeZ2-ftIua6vx709Z4EZautISQc1tJW+6nA2asW1sVfd6tsT+khBwsZSSm+sRe6zxks2z3f66V9kix6fmFvu+Eu$6Kx-stJPUZuutfotesx23TiTw98uxp0K2WUjfTgI1tSscBfx2-l+uqrMbVu3DjbozPaUoT$zisJUz7JIvn10NPd6881rm9TT$$4i+T8F5gN3D99ITm4Dd89k2d0b4wtK0ywgUXTvWi5GT8pCmr5YeHx6JQAhz7b-80g9lBRjTCtTJRQJAemyRkKZcON8gwoi9Vkz-TpItxv1Mvhqiyr9rrrpzZg$90rBNJ-D6Jv67SzdWl8tjmP0sVTQZW9lyPdG6dtltkzCe2ezPJZzr-T0blqnRz7C9kwxJBdrrDjNOWjrhordGVrtNn9ldJXABr53$PhwXoe4BAlD5gNRdcG8uX+dgNS3tWUASN8zPa8urVXNr8zyrMkrrG1jTsETrFCu6+1P+hRrRDimyk0r8idGETNwmHMuF2cTEEF3urYNBqmUhvgKkTmNrBqvEF3PPdpd+8hVvEBW4r8rDEecTegm3OEueedMCVP5urUbupf$mQVGiUNy98WXKmNhCgt3imF7$NlMoCi9kP-UNeCIR8nfOr81af+18Rrr8fP9P9ixcRrHrrI$vrVnZhBgmNErPseVnywACqdof6NhdMaV4rDD884vptpZefPSdQZujhONHE1DDDt9B7OQhHziNjd9WCnaCrkK2sfoE+rRfwD$FC8q2lvmv5bK65cU9kFfFMd9otrt6n-1pvRBKtUR-Wnrp+UslznAc05J6XklkXfMX8FEYtMPvRIZrd8Qg5ds-kGPNjHRZ8DrKZudirjd80NeSXeX6rQl2MiNkwqX+f--42ldCdGUQd9fC4ohYE5ZmN-NiNfgTWrKiMr4OjfrWpmFsZS8qrjfMee6FtZ64tNv1rrhl+yFr58jXVM+fWsXna1K+UVnE73AyyshYmicB8R3SP5sjPMCcOWi+Wr3Mar8dr2NwrhbivMThr5eMZrIWfrMTMVR859WdNaU8vrrPy35Zrr"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: QE/2HJ06TNZHkhFPXU7RnA==$XrB+9KlTBGRfhOs90VnArg==\r\nset-cookie: cf_clearance=VTiOsUJD7hRvb89ef5o8jfHWeRhkLXyXlcPDex2lPjQ-1773333636-1.2.1.1-SrPES7x5AHe2eiyhqx0NFqWNr936NkKDCdpTvpS1FISfgM7qKboHQoxSNokFtAIbxn4e3tiEiywVS8vhm8BexJhhA60Bosca8CzcWy7mgOXRU2A0Qne8d_vsiqMEy0dC9z_xIg8eV9mR.mXX3NCGe0LqOVY9zliYjeEzHUFR.AuWaQtaes_10.We2vasXhG78BydND4W7bZukcdLsHAPbW2EjFJ4KeDMsePPk0DdfyM; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ipsconfirm.com; Expires=Fri, 12 Mar 2027 16:40:36 GMT\r\ntiming-allow-origin: https://help.ipsconfirm.com\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9db43dddfcc396b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T14:49:10.846265Z","times_seen":17800640,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/profile/ticket/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T16:40:36.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /profile/ticket/76561198168115188 HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nB5grARB60d%2BfuIM3czlMYGx6788h42wD2nWG8Jzj8GWTahZTF5PMjqb5QlgVxWQNYnyO8s%2By5FiQ089duUnSBDby6COTGCt5YYfYOQ%2F8Tu3D%2Bc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9db43dda6e777dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16766,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5027), with CRLF line terminators","md5":"ea048a6e1ad52390af2f28d612ad215a","sha1":"8c0644e9fadd19c4ece48b2fe7fb008d95c89350","sha256":"a1a73cf31821d4763a86ddf5999b606a68f35e2cc4b39c280128162a7a0a2b42","sha512":"aebeeaf78688021a5b75a0bd3ddf7d4224a3d3bdb2d42970ce4bc915cd03e1aac6eb05229432a91593b99ecaa284b650c60a28d414ab36da3cedb5226ed04621","ssdeep":"192:OyJCjeWTKFrxC4XKmBGUVMNRremjTXcyayeMPrbYHiWAzGZ5zstmcz/d/gaPnx//:e6r/+sR8rJvle4rbbQ5zs0dknx//","tlshash":"1b72c6112ac1203b26b3c0969420f7aef9a54083d603d368f1fd371b9fe6ec5a633985","first_seen":"2026-03-12T16:41:03.548938Z","last_seen":"2026-03-12T16:41:03.548938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":55,"dns":27,"connect":8,"send":0,"wait":70,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.112","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 21:24:34 GMT","end":"Thu, 04 Jun 2026 21:24:33 GMT"},"fingerprint":{"sha1":"DE:F9:52:53:57:70:A4:34:C1:BB:ED:5F:81:3C:21:B2:F5:8A:83:69","sha256":"36:FE:01:E6:8A:D8:0C:BB:37:A9:8B:A4:20:B0:75:54:EC:7F:A1:7F:59:24:2E:EC:B4:8E:A9:89:AE:61:13:AE"}}},"request":{"raw":"GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 17 Nov 2020 23:33:19 GMT\r\nETag: \"5fb45dbf-e64\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1736\r\nDate: Thu, 12 Mar 2026 16:40:36 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7a7e43284e2ffe806ac1bc27c1f6a87","sha1":"e8196489e2ae99ec6eb33995b5a3e108d6e44de0","sha256":"c3a7c646a1305017f22423030cb5a12acc9f96b64013dcef7aeb80567b542cbb","sha512":"757e4f382a864cac9f975220c28586f5ea415b2e2215375c1a47e011a9190fcd15313d399007539f150a6df0378b8f2022ac88e995693ab03a9f5656bfe40832","ssdeep":"","tlshash":"1c71a6cc37338ba06a95827d1f357ad623b255eae97041e4c3952c262c07ef2ea64d74","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-07-31T00:11:27.84766Z","times_seen":2481,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":73,"dns":43,"connect":0,"send":0,"wait":2,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png","fqdn":"store.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.112","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 21:24:34 GMT","end":"Thu, 04 Jun 2026 21:24:33 GMT"},"fingerprint":{"sha1":"DE:F9:52:53:57:70:A4:34:C1:BB:ED:5F:81:3C:21:B2:F5:8A:83:69","sha256":"36:FE:01:E6:8A:D8:0C:BB:37:A9:8B:A4:20:B0:75:54:EC:7F:A1:7F:59:24:2E:EC:B4:8E:A9:89:AE:61:13:AE"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png HTTP/1.1\r\nHost: store.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 291\r\nLast-Modified: Wed, 28 Jun 2023 04:07:11 GMT\r\nETag: \"649bb1ef-123\"\r\nStrict-Transport-Security: max-age=63072000\r\nAccept-Ranges: bytes\r\nDate: Thu, 12 Mar 2026 16:40:36 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-09T11:19:58.032703Z","times_seen":7500,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":56,"dns":44,"connect":1,"send":0,"wait":20,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/api/status/76561198168115188","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /api/status/76561198168115188 HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://help.ipsconfirm.com/profile/ticket/76561198168115188\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 24\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"18-de4n8ou1NUgPz9MADhTTK1xSYeg\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0qSQrT1DoVf28Xbqoy%2F%2BQkeU2SkPTrmAv630Z1kqQBO6HzTWxXsotarjBjMPJ0ECGX4XZMyOHtgWhB0W0ehiEWaFaKnKiexioKuciT8e0ANPQU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9db43ddcfc9796b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10efc7ac2552f74973cde6bb394b07aa","sha1":"75ee27f28bb535480fcfd3000e14d32b5c5261e8","sha256":"e8a22a9279225b8936015ff103bcb017871faac342df4e11021fe4221de5f116","sha512":"29645a619b440efd070b5b9a910be4e11a0d285cfffa5c684d0ac80023a75c5898dc495f0f022ddab306e7abb277f493f73e71cfb4965de533dbb9ed24f49ccb","ssdeep":"","tlshash":"b8700000800000000aa80c20080330a03bac2a0f080a0880800c0e208880aa08328000","first_seen":"2026-02-25T17:59:13.270284Z","last_seen":"2026-06-11T00:43:05.669908Z","times_seen":5,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.ipsconfirm.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"help.ipsconfirm.com","domain":"ipsconfirm.com","tld":"com"},"ip":{"addr":"104.21.25.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipsconfirm.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 11:40:57 GMT","end":"Wed, 27 May 2026 11:40:56 GMT"},"fingerprint":{"sha1":"0D:7E:45:55:70:12:95:24:A9:11:CD:43:E5:D2:EE:92:DE:12:00:72","sha256":"0F:22:FC:0C:23:AB:3A:95:E4:05:D9:EB:B6:95:D4:A2:BC:29:AA:04:D9:29:AE:F6:40:BE:00:91:19:30:96:C3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: help.ipsconfirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9db43ddd1c9e96b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26451,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (26451), with no line terminators","md5":"0149dd7ce80a99fb9bc5315eec48d8f2","sha1":"0db78ddb221f0ea91b61fb7e964f11cba48bc7ce","sha256":"c57b4135855a480bb1f08823d35c26d1127a504dad310f241c3c139660f46fc3","sha512":"faecb0db0d2c0e097d199c02098a3f48cef5a6ffbfd6fc9a7c13560ba6ea00e76a04006622b74143548b29e79cd41f965f6bb65a565263ec9a876dc33c688ce7","ssdeep":"384:QeOQrwTMswuYNF+/q4QFGve/+f7b+Ricpd0JzrX1IMj1IgF8L4VUxy4HJvsUUnY:QeOQwZwuqFAXw+f70mxPR7CD7HoY","tlshash":"8fc2eacb39c8726a937590a3217776dfe2befc8874046e01c121d7f4786a38568b7d98","first_seen":"2026-03-12T16:41:03.556056Z","last_seen":"2026-03-12T17:30:18.674383Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"help.ipsconfirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/1f24e24e4679a3b480a21172ae27cf9467ca1da6_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help.ipsconfirm.com/profile/ticket/76561198168115188","date":"2026-03-12T16:40:36.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 15:23:08 GMT","end":"Sun, 24 May 2026 15:23:07 GMT"},"fingerprint":{"sha1":"6E:F3:11:BE:49:20:73:9C:9F:15:59:16:8E:CD:73:61:F4:A9:A5:5B","sha256":"19:8B:6B:5A:D9:B9:35:38:1F:DA:96:58:CC:7D:E4:C6:AE:B9:92:0F:85:A5:B0:83:A2:EE:D9:C1:4E:1B:38:5F"}}},"request":{"raw":"GET /1f24e24e4679a3b480a21172ae27cf9467ca1da6_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://help.ipsconfirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AGQBYWyq6SCs1ONyviMZEyA6B0T_z3htD-gG8B95zCctGCswHI16lgCWrEt79-ShKNIk4FywZXu7TKY\r\nlast-modified: Sat, 07 Mar 2026 09:03:12 GMT\r\netag: \"78d530630aa6f90cb9a79149acab0665\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 12 Mar 2026 16:40:36 GMT\r\nvia: 1.1 varnish\r\nage: 208783\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 5\r\nx-timer: S1773333637.533767,VS0,VE0\r\ncontent-length: 2477\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2477,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 1","md5":"78d530630aa6f90cb9a79149acab0665","sha1":"53d440ddf9383de59800a26435f3b11cc07e0190","sha256":"0bfaad0fc4ec3a310a570920334ca68e6e4a338594d2d40e44ce2e63f048caf3","sha512":"6ba959b3c96cfee200170d52064c7054ba571cfbe3e49fbbb84ed3c33911da3c1d57ff7ecb36840fcbc0d2933c9f889ab52291160ab2ded6b9e5f3756429f749","ssdeep":"","tlshash":"7f51c72b4633c3ddf3091a32d7a6d4acc885c673534688ad42033540d4d26f98f1e32d","first_seen":"2026-02-07T17:34:03.552178Z","last_seen":"2026-06-11T00:43:05.668161Z","times_seen":9,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":56,"dns":26,"connect":13,"send":0,"wait":14,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}