{"report_id":"32a7c87a-7087-4a3f-a1dc-2afb466ca6aa","version":0,"status":"done","tags":[],"date":"2026-10-04T02:11:37Z","url":{"schema":"http","addr":"cum.salon","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":0,"asn":31898,"as":"Oracle Corporation","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"cum.salon/","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"title":"cum salon","dom":{"size":2794,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1860)","md5":"9b47f94628794b385802a4a7301e979d","sha1":"f062210487ffbc481dab0416991bdb9e32875681","sha256":"85a8808ec90baa105177d22e65990ef07da89f78208331d71bf450cad4c724f7","sha512":"87a811b98dc058966ead9dda5db194ff21ed140f1851fdcc532306916b824fc260fc350343babdb0d32e2dcdbbd07a7816e9dd592b929caa6d60980ee1fdb8a4","ssdeep":"","tlshash":"725134491b6054a7132388809df2bd5ee89ef70bc14e904068a8d1895ff3de96b7f5e8","dom_hash":"domhashed992e8e86e32421924510089cb89aaf","first_seen":"2026-10-04T02:11:47.470249Z","last_seen":"2026-10-04T02:11:47.470249Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cum.salon","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":0,"asn":31898,"as":"Oracle Corporation","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T02:11:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cum.salon","ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"domain_registered":"2022-02-14","domain_rank":4216345,"first_seen":"2026-10-04T02:11:41.725149Z","last_seen":"2026-10-04T02:11:41.725149Z","alert_count":0,"request_count":7,"received_data":965371,"sent_data":3268,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cum.salon/assets/index-DSfWni3Y.js","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"559072571ee41d22e34dc2e5433d9aee","sha1":"26a8bf0b8654fc9cd9951cdab4b16a77da1f4362","sha256":"5d4a69f010dc10f95d5063dc6c9994607e0541434f2fe13c970e6e457eecf934","sha512":"2d38954b337ed8aa2c52901c8b086ce0cdd81d459d54b2c7f8204b51d536acd1301e67d9cf04e08c5eb1ee14b12103eade0706bce240d61db846b4c435e1b309","ssdeep":"12288:fV6WdEcO+N4wnpfq7FFCnpBmjUIVXuyw9GIF/7WNJCKw4A55Ek4eC/MOwNqwWuPJ:fV/dEcHN4wnpfq7FFCnpBmjUIVXuyw9n","tlshash":"42c44a9871aab42943f758e594ab1005f33c1fa5780884e8f0fc8d9a3a76c959377f6c","size":564894,"data":"","first_seen":"2026-10-04T02:11:47.475696Z","last_seen":"2026-10-04T02:11:47.475696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cum.salon/favicon.ico","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cum.salon/","date":"2026-10-04T02:09:23.553Z","timestamp":1791079763553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cum.salon/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:23 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 4286\r\nlast-modified: Mon, 21 Sep 2026 23:52:54 GMT\r\netag: \"e65aa8:10be:6ab1c356:2cd95588\"\r\naccess-control-expose-headers: etag, last-modified, accept-ranges, content-type, content-disposition\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":5062,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"2d8c43ec75152afd1403ff80083e943d","sha1":"d870a40ab6abaf1df2d41e7d3e8eac846009d5a1","sha256":"d70e7e3d9c816ae722b7c686b75113df012346b7b1c2115e5026644d2fb30697","sha512":"f8375af7802eaf7b103af7255252514cb39576e585290edf818a5d45b0abb4663c34bee56c5249efb35b0c2bc45c64b46c551137331a2638c3bea778f0521cc3","ssdeep":"48:A3Ioz7siMi8ice8+DjRx3xMe83OxDH8+ci8iMisYLoInp+:uPN3FPF+","tlshash":"dd91b420dc65075fd38282321a07ca3ebf20ed9e43641a90b5f83eaffcad5467119699","first_seen":"2024-10-11T08:24:00.848376Z","last_seen":"2026-10-04T02:11:47.471608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":325,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cum.salon/assets/startpage-LDuLgnLJ.png","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cum.salon/","date":"2026-10-04T02:09:23.674Z","timestamp":1791079763674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET /assets/startpage-LDuLgnLJ.png HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cum.salon/assets/index-BiGtqBVE.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 283446\r\nlast-modified: Mon, 21 Sep 2026 23:52:55 GMT\r\nx-content-type-options: nosniff\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\netag: \"e65ac2:45336:6ab1c357:153617a7\"\r\ncontent-disposition: inline; filename=\"startpage-LDuLgnLJ.png\"\r\naccept-ranges: bytes\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: last-modified, etag, content-disposition, content-type, accept-ranges\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283446,"size_decoded":284233,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, interlaced","md5":"db4e0338b76a0866c95d9c66ce657847","sha1":"54cea73672d3b991e45ef5c479ab7cd5eebb82aa","sha256":"3aa38eda3d15417a0164808ee468d2e834cccba8951dec4d6a072ebae5223d0b","sha512":"0263ca203d874106af3b095cbc7d32c5540a65c47fbe99829990c567e1b8afb728b7d4e5b5285cfb0a1d43661370f0a89a5a5073800b7cacb8809d1a99e1edda","ssdeep":"6144:SA+Vxi3xFfmlFZ/kaNxH1OaDZvUDts+AtC4zbn2:GDiBFmZBNxH1JNv9Ay2","tlshash":"6254e077c33124bbb66007a8b1056b9611a52efb747de80502e3394e672ffe82d72d49","first_seen":"2026-10-04T02:11:47.473213Z","last_seen":"2026-10-04T02:11:47.473213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cum.salon/","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T02:09:20.489Z","timestamp":1791079760489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 989\r\nlast-modified: Mon, 21 Sep 2026 23:52:55 GMT\r\nx-content-type-options: nosniff\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\netag: \"e65aa9:3dd:6ab1c357:154559ec\"\r\ncontent-disposition: inline; filename=\"index.html\"\r\naccept-ranges: bytes\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: content-type, accept-ranges, last-modified, etag, content-disposition\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":989,"size_decoded":1774,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"cc40a3565a5c730b2082c4a26d8c20a5","sha1":"f2f49b3a941f941463a70105d73aa7ad573aafa1","sha256":"23853b0fa568b605069c12243e3ab085b34f9a70d5d5c7e90cd10eaf96906e0a","sha512":"732a25098e82c275ccdfc6c20fd7adbf3c3d680817dd9412be19c05242ba01762af0e30d66a5203c78b6543c24382dfcaec6ebfd7f808299db9eccfa91e9f472","ssdeep":"","tlshash":"1c11b1469cf08519133152156de1f518cd96aa0b821d98d470ed50ae1fc1bc688ef83c","first_seen":"2026-10-04T02:11:47.474407Z","last_seen":"2026-10-04T02:11:47.474407Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1586,"timings":{"blocked":-1,"dns":941,"connect":29,"send":0,"wait":551,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cum.salon/assets/index-DSfWni3Y.js","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cum.salon/","date":"2026-10-04T02:09:22.341Z","timestamp":1791079762341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET /assets/index-DSfWni3Y.js HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cum.salon/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:22 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 564894\r\nlast-modified: Mon, 21 Sep 2026 23:52:55 GMT\r\nx-content-type-options: nosniff\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\netag: \"e65ab4:89e9e:6ab1c357:154559ec\"\r\ncontent-disposition: inline; filename=\"index-DSfWni3Y.js\"\r\naccept-ranges: bytes\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: last-modified, content-disposition, content-type, accept-ranges, etag\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":564894,"size_decoded":565682,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37795)","md5":"559072571ee41d22e34dc2e5433d9aee","sha1":"26a8bf0b8654fc9cd9951cdab4b16a77da1f4362","sha256":"5d4a69f010dc10f95d5063dc6c9994607e0541434f2fe13c970e6e457eecf934","sha512":"2d38954b337ed8aa2c52901c8b086ce0cdd81d459d54b2c7f8204b51d536acd1301e67d9cf04e08c5eb1ee14b12103eade0706bce240d61db846b4c435e1b309","ssdeep":"12288:fV6WdEcO+N4wnpfq7FFCnpBmjUIVXuyw9GIF/7WNJCKw4A55Ek4eC/MOwNqwWuPJ:fV/dEcHN4wnpfq7FFCnpBmjUIVXuyw9n","tlshash":"42c44a9871aab42943f758e594ab1005f33c1fa5780884e8f0fc8d9a3a76c959377f6c","first_seen":"2026-10-04T02:11:47.475696Z","last_seen":"2026-10-04T02:11:47.475696Z","times_seen":1,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":727,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cum.salon/assets/index-BiGtqBVE.css","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cum.salon/","date":"2026-10-04T02:09:22.343Z","timestamp":1791079762343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET /assets/index-BiGtqBVE.css HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cum.salon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 103103\r\nlast-modified: Mon, 21 Sep 2026 23:52:55 GMT\r\netag: \"e65ab3:192bf:6ab1c357:153617a7\"\r\naccess-control-expose-headers: accept-ranges, last-modified, etag, content-type, content-disposition\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\ncontent-disposition: inline; filename=\"index-BiGtqBVE.css\"\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103103,"size_decoded":103900,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"2437fc08234438ebf0d52772ea8da88e","sha1":"1151617148ac1020217b14622ae2de6710a82a47","sha256":"c3b8ca4f9de62dff42559e6b5cbcf0c7462ef460aef80a78e28de9f5c32bf79a","sha512":"1872a590140e22378f2e03a3a50f56871c2daf1c81cf2cb718f654d3c5c24e56bfaa52af5872f5ff8a226f796a81d6de4d3ff6449af2cc69a3730665bd46657b","ssdeep":"768:YxTWRdpkGZpzs3PeFO2N8K3rawerB6SEkHN9Lr1pcNKyRV03eCp8FOi6ptTeyERa:a4dZzs3PeFO2Otz9/T1D","tlshash":"75a3b468b69c7026363bd46e55d4d44e56093b03de0723f1b99781a88fcbac23736acd","first_seen":"2026-10-04T02:11:47.476922Z","last_seen":"2026-10-04T02:11:47.476922Z","times_seen":1,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cum.salon/assets/custom.css","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cum.salon/","date":"2026-10-04T02:09:22.345Z","timestamp":1791079762345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET /assets/custom.css HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cum.salon/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 260\r\naccess-control-expose-headers: content-type, content-disposition, last-modified, etag, accept-ranges\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\nlast-modified: Mon, 21 Sep 2026 23:52:54 GMT\r\ncontent-disposition: inline; filename=\"custom.css\"\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\netag: \"e65aad:104:6ab1c356:2cd58692\"\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":260,"size_decoded":1044,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4c9e5aed684a8b1733a6d97209374592","sha1":"4ec90ae1c623e9f29c3b06809dde5c076331ed77","sha256":"3872b0271aa618a48e38666e6188eca01666130fba60cfeda35826c50a48c6d3","sha512":"7001bc0e68d98edbb5877004b943e2934d299f4ccec6d7010724f1eafdc48c9042ab73a50486421d8368098dd50bc8cbb236dc5be17fc1ecbdff347de4eb61ee","ssdeep":"","tlshash":"9ed0957545cc550f33ad447f639992e2007fd189c116cfa228d839acec4265e20728e4","first_seen":"2026-10-04T02:11:47.477916Z","last_seen":"2026-10-04T02:11:47.477916Z","times_seen":1,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cum.salon/api/v2/instance","fqdn":"cum.salon","domain":"cum.salon","tld":"salon"},"ip":{"addr":"140.238.209.189","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cum.salon/","date":"2026-10-04T02:09:23.448Z","timestamp":1791079763448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cum.salon","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 01:01:43 GMT","end":"Wed, 11 Nov 2026 01:01:42 GMT"},"fingerprint":{"sha1":"2E:71:50:6F:54:C9:F9:FB:01:30:94:1D:BE:26:E6:F5:CF:21:11:F1","sha256":"67:7E:93:6D:B1:0B:79:0A:2E:72:5F:4A:C7:C8:70:21:76:51:A8:7E:48:D4:FC:C1:70:CC:82:82:78:E0:08:BC"}}},"request":{"raw":"GET /api/v2/instance HTTP/1.1\r\nHost: cum.salon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cum.salon/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 04 Oct 2026 02:09:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 3113\r\nx-content-type-options: nosniff\r\ncontent-security-policy: base-uri 'self'; connect-src 'self' *; default-src 'none'; frame-ancestors 'none'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-expose-headers: content-type\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3113,"size_decoded":3676,"mime_type":"application/json","magic":"JSON text data","md5":"3508776c8ece6bba91d6c47b758b77fb","sha1":"c81baad1a532e2bf2a515b3b2e72491cb1d16d19","sha256":"293b6de701e4c2fbb4ed8b59fc51ee43b6b6067470f0392f47cf426a2d5e5e22","sha512":"2885c06b45137256577bd1a65396b5c684d17ce91fda7ef2fd92396940f0136ea8a243c3462b7afa9942851797bd7e6d0bb072aed371e23fccbad8c8f0194993","ssdeep":"","tlshash":"9351855b050e58374b63c6cdf9053f0d82ba762b3880d998cbface6d02dd67d920a503","first_seen":"2026-10-04T02:11:47.479486Z","last_seen":"2026-10-04T02:11:47.479486Z","times_seen":1,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}