{"report_id":"325371ce-f46c-43dd-b289-bb7b8ff8858f","version":6,"status":"done","tags":[],"date":"2026-02-14T09:08:50Z","url":{"schema":"https","addr":"optimus-sniper.click/","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"104.21.57.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"optimus-sniper.click/","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"title":"Optimus-Sniper.click - Advanced Crypto Sniping Platform","dom":{"size":47423,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (624)","md5":"7b499b814fc0f3e81f05739419b2ae3f","sha1":"87e4157d485abeaa9bb26b766e1b8ac046fb6bff","sha256":"a371c0fa4b58675dcea1fcdca37bd17efabbb9c2e818893cb63a2a4029f8df45","sha512":"31592e6bf2005ad4917e585c904593f1e1323df9b19cd45e7e77ebbabaf91062633b8620a097ab09ec0de9cbc7c570c04b36cdcc8167dba56b0c2b9eca4e413c","ssdeep":"768:vOOnuuRyjFyjJf1kuLCuoHuLRuoSU9v9U:vOOnuueyJf1kuLCuoHuLRuoSU9vO","tlshash":"4d232d2950f7147690a3c0e16ba64b0b6f95da1bd81f0a0277bd4fc85fdbd9adc23209","dom_hash":"domhash09bb6f4391d58a8a0b69b20e35fe1f4f","first_seen":"2026-02-13T13:38:28.81373Z","last_seen":"2026-02-14T09:08:51.992316Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"optimus-sniper.click/","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"104.21.57.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T09:08:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"optimus-sniper.click","ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-02-13T13:38:23.645483Z","last_seen":"2026-02-13T13:38:23.645483Z","alert_count":12,"request_count":12,"received_data":673112,"sent_data":5743,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nightt.live","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T13:38:23.631734Z","last_seen":"2026-02-13T13:38:23.631734Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":420,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"optimus-sniper.click/script.js","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f5a09c18899cb3695063aa9ef04f569","sha1":"f2b9e1941d3a63163e0a2d1943eab28f49fa4cd6","sha256":"4acf28e24206cea747d0bc4f484f4be0d275e61e2a766b662d0a5a3b86a7a57d","sha512":"b1460c634a81deddf6ac121e449d0320aee763713eac3f95a3a5a3d79bb982ffe844ec4a6ab5d52352206f2fc49a158e344a4fe6923ebb3c1ac7e01901915ccc","ssdeep":"192:tltKKYP/mBQwnOZm0X9Om8YQvvrH0p+S5XZLTQCWGCYGtybX5hBBfUy+sa2CJ1C3:tltdCqjM2vrH0p+c0Brhc","tlshash":"c922951a26b71074823754fb93df23883a3960473446de493dad47881f81b756af2fe2","size":10136,"data":"","first_seen":"2026-02-13T07:27:14.554651Z","last_seen":"2026-02-14T09:10:36.023181Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"948464eb6a46eeaa5bf90473ec727d9c","sha1":"fcb9273d0e4560ba9b03091b3432ddbf251ede24","sha256":"c5162b550000261a3ae01bd83c16d076b18eac1c4f77ea771b694e9a5eeb9352","sha512":"5a33f3bda9896d8adc1114f5523a1405099e54d23af856d4dab608d0a98dc25e844af99b6bc14cf5bf1411cff3c628a1768ed0038f9b9d776abda1188b6ad06a","ssdeep":"","tlshash":"e1a0220ec03ac30303203b3200a0c2c208fec830cf033fca002b0280008e0ac2303a08","size":67,"data":"","first_seen":"2025-09-22T16:06:11.342381Z","last_seen":"2026-03-28T00:21:55.262269Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86929d34ee898779e64e67568ab754c7","sha1":"7d8f3fb2f8ec262bb64da398015e631fb68eb93a","sha256":"d8c4f35ae458c672a19635709588c7364f5fcac13e0621a5c42290a0afe65f97","sha512":"c7843ee0cc9858fcf7320df58d65f05b0a8a491e89bad8238b67a7fb58a4544fe50410cc388c1d49ffab9d01d6cb513f96175369d12d8773b7afef2e6e2c635d","ssdeep":"192:yCELcBkR4Ug8vXQ9lSJC5KyCKyK5CfsdsPC0KOlCSXn:oLS5U9v9LlX","tlshash":"ec12841c9ab70620952320b957e7a3982635464b7438cd373d4e8f0c2f96e3c95967ee","size":9858,"data":"","first_seen":"2026-02-13T13:38:28.821352Z","last_seen":"2026-02-14T09:08:51.999639Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"32f7eee2581c72a5561c21df3013a89a","sha1":"b38bed0f0e9601a07358ec72777da31f91720f2a","sha256":"bb69fc1cad24c2d6a80bd8d6a50ae43eba927a2922dceca5365fd07db8220d19","sha512":"c9d50bde320eee008849d9224a4336eb02c8956bf5efe8c7ed9f6bfc525fce2fe7c56b0e7d86e67f7d22705653042b9a21a60eb7a012aa8c6069b5db8b7758bd","ssdeep":"","tlshash":"2d30000000000330000000000000030000000000000000300000000000000000000000","size":4,"data":"","first_seen":"2025-08-25T15:23:52.713783Z","last_seen":"2026-03-28T00:21:55.267207Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"optimus-sniper.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48432\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: \"696ad9f7-bd30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soIK4yrbpCzRu3JmR%2FfJBxw0GmH7h1GMmKmi6AUtWKfnSO5XtmCyMPwWjAh34kj6R%2FG%2Biri8EB2mxnc5oxqnA063aCD%2FdT%2BXvWGrvLfdzOyTxjFU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb6bc7db4e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-12T19:55:13.281126Z","times_seen":89934,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48432\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: \"696ad9f7-bd30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZzn2tQ2d6dOWsrjGzHyROabrvg8QTf8Ulrpo2fveKH9Enohm9xkl%2BBo%2FOTbsYL7yxWFIg6%2F4tRsuZR%2BdtgyaUr0zgkZ8ab%2B7sziV3ARlWQJQnvU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb6bc7db4f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-12T19:55:13.281126Z","times_seen":89934,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/fa-brands-400.woff2","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /fa-brands-400.woff2 HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 104544\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: \"696ad9f7-19860\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DpcgKqBv7PyQUiL1B0OJefpwC1b1ZD3OXQ7TBCvDwofJaAOAUb6x2gYHfjBEDzC1M4zqHaRl8wolgzlXsup%2BAknjPwuDfLOKp5Izc2l0wuAbwPy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb6bc81b535fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104544,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 104544, version 768.256","md5":"a9afdb72826cde196ddf29eb8f9d0f8f","sha1":"69fc982ace0b9fdd2cfa68c6628bcaad00f407fd","sha256":"29bc44694c394921d1f00271128a2e4cd8293516216e24eac07a73fa821fc1f5","sha512":"91414027bbd6fc01d2ee035d519530d017f34f9c8b9150a2e4a45386e3cfee2f4ecd07ab8f658b426e965536be75b3c6b396e8e65ab4fa33031779d3b0873dcd","ssdeep":"3072:V3ZSTBmqhFEpJTbnHMg1FZTRB/CClfbzXcW0FC3y0ew:ZZWBXwpFbsg1FZTRBbFMlFCDew","tlshash":"85a3128faa6fa70a2a1c79c5341418acf3102fd5c51e0be01474d9fff2385aa57685d6","first_seen":"2023-04-07T13:45:16Z","last_seen":"2026-08-12T15:07:55.799621Z","times_seen":5679,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:08:26.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:08:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBxNY6GcRrWb1PvrjjHRrU0EXz5RKTWE6DuW1SKjDmleIelYyi%2BWOnLCDZR3VIX1JXbC24zrP%2F3Yh9ckuT76%2FcQYER3wHwX18cCUG02hVgw2utRj\"}]}\r\nage: 114456\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdb6bc3cb72ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46423,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563)","md5":"240051a9016d530bf75743f0bb796722","sha1":"1586afad390b5a99ed5d90e9b1139d1d27d540fb","sha256":"d4bc6d0c64abd79cc85c2b3cf065d04d571531c2bdc8d14356b4f857b7785928","sha512":"4bba9f81f1e9fa7ca6a63b7fca55a654514fe3bf4854c54ac4d77923efc071ba3a233a3e13a2a90d7e3f3f5288a4d442d1b36d26d0dc93c35b3342cd0b32af64","ssdeep":"768:IOOCuuRyjFyjJf1kuLCuoHuLRuoKU9v9o:IOOCuueyJf1kuLCuoHuLRuoKU9vq","tlshash":"f3233d2950f7147690a3c0e16ba64b0b6f95da1bd80f060277bd8fc85fdbd9adc23209","first_seen":"2026-02-13T13:38:28.815377Z","last_seen":"2026-02-14T09:08:51.994918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":87,"dns":55,"connect":8,"send":0,"wait":22,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/styles.css","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: W/\"696ad9f7-8414\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPKthX19Pdn2Qn1i6GkObJY34LA5QRJVfIZPhGEIXagIrUENqIRiIh8M3lc7Rqs3eCsIs5rK60IysQTF6fxUy8TZuMev%2B1039bJ6gh%2FgFdWJNBme\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb6bc53af55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33812,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"967ac0bae9b3053d985d7bb7826c2845","sha1":"94cc21d4cacabc472a1435283a5e31017f53f754","sha256":"afd187a331577b2e840812d78bbfc1edb430a6a4b067fffa615c3b974a4afd37","sha512":"726816a7c1a3a21d5f2044fe8e31fdc6dd31de4ddc288f89dfcc5a9de6ccbd67c1f1d5587902674e928cbf9c59038dc1ef0418c192063830532d35d6df95f246","ssdeep":"384:1aPTfi/SBFIeQ6rSZbdIFERsZYtWRLKRrezIL2a:YrfQEFIlZbdIFE0YtoLcrJ2a","tlshash":"d2e2429666a31564b81ba5281bff9755732cd043c80edd7e7b8d224c8f852f891a3f8c","first_seen":"2026-02-13T07:27:14.551501Z","last_seen":"2026-02-14T09:10:36.021331Z","times_seen":12,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/all.min.css","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /all.min.css HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: W/\"696ad9f7-15b8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yg2aJbL9GEqs%2BgiQqusv%2FEfCUaBfjtcOHYlGDE3oK45bgJ%2B9yE4Gwfat6Datw0CPB7YcQxEj5QfNjblslmrmn8cVpFpKFya63OnFSmqcEDI%2BP5dM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb6bc53af75fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88974,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65317)","md5":"ca33176f3f6a5c03b542e8a8f42feccc","sha1":"7cf5b1a782f5be8ab2c087540edcf8901e38d98b","sha256":"90419c7a4c333566fea5552ec70277cf9174a37ed2811fc8b04ad7c4f0d43a0b","sha512":"9d87a55325424faf2fde34f1dfc79a7780efd86db3439b7d6d3afa969e6296c9e5b6357a5a4bb9de9907105e090be7f10bdc5540861e3c1594ea9748e462778f","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IVbUHsR+F:Dd1NY95IVbUMR+F","tlshash":"1e93a9e9e04c05d56732c44baf99b37c65b6f73cd5810da9f02f580c1ad26a822c6f7a","first_seen":"2025-11-20T09:52:07.642394Z","last_seen":"2026-07-15T22:38:06.878302Z","times_seen":11,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/script.js","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: W/\"696ad9f7-2798\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVIz5kHDTtx7OZ7esuOk%2BY8M5YutbW8zKEjc7Pprxo0SjNYkl9oLWtVa0MudcOsyv%2FJkMRvAWv0d31UJMU6REHYmdter1oYiCAr4NIBX88KTsUWW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb6bc53af85fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10136,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4f5a09c18899cb3695063aa9ef04f569","sha1":"f2b9e1941d3a63163e0a2d1943eab28f49fa4cd6","sha256":"4acf28e24206cea747d0bc4f484f4be0d275e61e2a766b662d0a5a3b86a7a57d","sha512":"b1460c634a81deddf6ac121e449d0320aee763713eac3f95a3a5a3d79bb982ffe844ec4a6ab5d52352206f2fc49a158e344a4fe6923ebb3c1ac7e01901915ccc","ssdeep":"192:tltKKYP/mBQwnOZm0X9Om8YQvvrH0p+S5XZLTQCWGCYGtybX5hBBfUy+sa2CJ1C3:tltdCqjM2vrH0p+c0Brhc","tlshash":"c922951a26b71074823754fb93df23883a3960473446de493dad47881f81b756af2fe2","first_seen":"2026-02-13T07:27:14.554651Z","last_seen":"2026-02-14T09:10:36.023181Z","times_seen":12,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/fa-solid-900.woff2","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /fa-solid-900.woff2 HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 126828\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: \"696ad9f7-1ef6c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crwD%2FbRjFql0GkkC6SsTVTR05xwq%2B%2F%2FGjZjf7MCU0Rw71dvfZYiMHcdrZKmm6%2FImd8gJSyhEmvHrMdfCqxpbqJ%2FkJEPbAE3seISoKEZZFvEbjrrH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb6bc7bb4a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-12T15:53:53.722478Z","times_seen":10957,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48432\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: \"696ad9f7-bd30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8t0OMaZoYbNSassTUo65lTTx5KtBEVYXNQStUrznQ7NFmoqh5%2BwSYxXWOcjOoERbw6VGVJhjWyMWde42R6trITApgqJ7Akpd8B%2Fm7GGXFuTFwLT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb6bc7cb4d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-12T19:55:13.281126Z","times_seen":89934,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/favicon.ico","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:28 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jH1ZXOXSD4MbUb8oRFhHr7N2gU97u2muC4QRFsVebOCUXPFygW9y2OBl%2BwCIlQYYUly0ZdiSI%2BIO4PdcCnIWzIYk2eXTujdcXgXmaatZCTX%2FqRr%2B\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9cdb6bca5b665fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46423,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (563)","md5":"240051a9016d530bf75743f0bb796722","sha1":"1586afad390b5a99ed5d90e9b1139d1d27d540fb","sha256":"d4bc6d0c64abd79cc85c2b3cf065d04d571531c2bdc8d14356b4f857b7785928","sha512":"4bba9f81f1e9fa7ca6a63b7fca55a654514fe3bf4854c54ac4d77923efc071ba3a233a3e13a2a90d7e3f3f5288a4d442d1b36d26d0dc93c35b3342cd0b32af64","ssdeep":"768:IOOCuuRyjFyjJf1kuLCuoHuLRuoKU9v9o:IOOCuueyJf1kuLCuoHuLRuoKU9vq","tlshash":"f3233d2950f7147690a3c0e16ba64b0b6f95da1bd80f060277bd8fc85fdbd9adc23209","first_seen":"2026-02-13T13:38:28.815377Z","last_seen":"2026-02-14T09:08:51.994918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nightt.live/axiom/loader.js","fqdn":"nightt.live","domain":"nightt.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.080Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /axiom/loader.js HTTP/1.1\r\nHost: nightt.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T19:53:58.870428Z","times_seen":17859978,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":85,"dns":0,"connect":26,"send":0,"wait":0,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/css2.css","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: W/\"696ad9f7-2c0b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lW9oe1S1Ziz%2BmlAwsuTuOwfDPkumxrWfxImJTdEmzeyFgCrTxWap8V1CZGE7Wz3iVLpsryCJpmHD%2FNi3e%2FDy9gbL0T3QoaUOWbZZ%2BbGp7AnNAV1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdb6bc53af65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11275,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"25f5948a3657caad9c45c7a181fa2b8e","sha1":"b71889a2c4e7bd5068e7cc224b7ca8261490ccb0","sha256":"13d4d9cd257c3bf1b07e14e25b6305cd668880434207da53d1724d84c3cbe3e2","sha512":"d1ea387d00d33cd7e5a272a92f1ffaee319db45619ce354cfe3e863328d46316e146fbb3fd2d052866a6193f89e0704d7245b85745c72cd60c9e7a062ffa2e86","ssdeep":"192:wEA6XD3lOQiwpENb+D34nQDw6EO09D3/AQ8wXEr90D3i5QlwwEE+bD3RKQGwj:7XPWaQdZxU8a7TTj","tlshash":"1732cc91002b6400d7a71cd227cf3f3a6fdc60586449da782ffd098a6cebda953a1b5d","first_seen":"2026-02-13T07:27:14.552975Z","last_seen":"2026-02-14T09:10:36.016706Z","times_seen":8,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"optimus-sniper.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2","fqdn":"optimus-sniper.click","domain":"optimus-sniper.click","tld":"click"},"ip":{"addr":"172.67.193.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optimus-sniper.click/","date":"2026-02-14T09:08:27.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optimus-sniper.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 22:24:49 GMT","end":"Thu, 16 Apr 2026 23:22:31 GMT"},"fingerprint":{"sha1":"B1:CE:9B:A1:2B:29:CA:24:E9:60:B5:2E:AA:0C:55:76:81:8E:63:BA","sha256":"0B:4F:E2:EF:E1:48:D8:C8:CC:26:9C:1A:E6:FB:86:09:A2:99:9C:20:61:AC:5D:62:93:CF:58:54:0C:A0:54:75"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0Q5nw.woff2 HTTP/1.1\r\nHost: optimus-sniper.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://optimus-sniper.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:08:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48432\r\ncast-mode: default\r\nlast-modified: Sat, 17 Jan 2026 00:38:15 GMT\r\netag: \"696ad9f7-bd30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQM6CXcRp1VMbZSRNjG5Xru78d%2B%2Ft5cvxgiHhdjGjDyiAyVJLD2Rko1ex511RA9TiL2w4Zk8HTOc3Hmyod94nJwFytWktp1npg0InRdKZY%2Bo2nTT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb6bc7cb4c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-12T19:55:13.281126Z","times_seen":89934,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"optimus-sniper.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}