{"report_id":"33e912d0-046f-4289-92ff-0c6d485e2552","version":0,"status":"done","tags":[],"date":"2026-10-10T22:14:38Z","url":{"schema":"http","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":0,"asn":396982,"as":"Google LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"title":"Home","dom":{"size":30579,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1721)","md5":"859231f83996cefd5bb161842c81bfb2","sha1":"60cf1123d1d2f322ae56353d0a37f794472e1397","sha256":"e2d87e189315966da91b4ee1f7d70c8c6d47b852fb96a445aadfedb2e49fb839","sha512":"d633fadf0ff079dd66b27b6a84b2c66ca218840211c9eaf62ca10da59a9e9b24212cce01a488c44d81a60cfd48076387c391dc2e5017b6d57ba4cddd7bcbe3e9","ssdeep":"384:kEnPkFxh93Q1q+L5/+CIlUJEHVbg9pSAJ1TpVT8WDAgZQcu:xy93Q1zL5/+CIlUJEU1TpVT7Rmcu","tlshash":"61d2d92009f950b3a15382d9faf5ae6e6e52ea0b9b0f095479ec05d0bfc3dd298531dc","dom_hash":"domhash308062093eafdfd5141c29fa4a1f4f2f","first_seen":"2026-10-10T22:14:53.527118Z","last_seen":"2026-10-10T22:14:53.527118Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":0,"asn":396982,"as":"Google LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:14:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"1010.archi","ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-10T22:14:44.461534Z","last_seen":"2026-10-10T22:14:44.461534Z","alert_count":76,"request_count":38,"received_data":7389037,"sent_data":18923,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"use.typekit.net","ip":{"addr":"23.33.119.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4054,"first_seen":"2012-07-05T01:42:39Z","last_seen":"2026-10-05T10:56:18.406847Z","alert_count":0,"request_count":1,"received_data":18103,"sent_data":735,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1010.archi/scripts/musewpslideshow.js?crc=4044861007","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aafcc57d41a3d6c05b0b83feaba8262d","sha1":"0e87f15fa41717602c4164faef87cb67a0a3d0c2","sha256":"7de7c62ce44133d9632be523af854262d653d3f09131e33b60970ac8d4d781f3","sha512":"fc7ddab3f09e10f8fd1ccde04c33b6a31f0b1d33e89eecc64b14ed1a3f1938df8d77f7e1e82082bedb12bd06899ea67d391bff428936f555be92d6877026ad55","ssdeep":"384:DRHFZ3BFpXyo5dZcXtGSCzhr1oKHr/30sop1xQ51OUT7A9Z8:DJFFBFxyobZgkzoKHr0sop1xQ51fIX8","tlshash":"4a821a28fa50395480ff74b3e01fa50d32b2aa349f039d55797a81a54c78e8d2573fad","size":18557,"data":"","first_seen":"2024-10-26T04:46:56.830428Z","last_seen":"2026-10-10T22:14:53.554821Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a7b9c26a066f31dba363cd298c51225","sha1":"bcfc14e6939c962276251f7c8c1de116dfbaed6c","sha256":"44e8daee3471853de7eceb0413679987a31f95a4ccab0d0ecdf5816b2b4e4765","sha512":"fd440ca8820deb4edc1263cbe10efef9d2608c7697f103270ae1bd4e598c64e12bacfce13b8a42aa63e783b0d57e4ed4fe66e31909677fbbf1d1f01b5eb89fa9","ssdeep":"","tlshash":"c53175fa23476b3f01702d59291993893533a932a6252c41c2be44307b58e4f562ddf4","size":1833,"data":"","first_seen":"2026-10-10T22:14:53.610634Z","last_seen":"2026-10-10T22:14:53.610634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b038b6b8a46b6214ad888f6da27f4c37","sha1":"0a69d750f19d85c7a8da874f91c9ca4d3a274bf2","sha256":"d4f7416a832c2c3ba544bf6d44c1d8634aebb739d82cf20aa9f648bfc9d0fda9","sha512":"31042fa7bf6feeeafac450ab0cc5014b9a4e87cde603e4f6fc82e73640c0f4724334ddd440a2dc2be564a364a97429c8ed46eb3f3634d2f6745e21bd08dfbe8e","ssdeep":"","tlshash":"e7f0dce21e0ad7c08ad4bc90e724fe508726e564c921f624f46993605188dd856f5845","size":453,"data":"","first_seen":"2026-10-10T22:14:53.611935Z","last_seen":"2026-10-10T22:14:53.611935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b5891526725fb5cdb890571f5a0edcd","sha1":"69145765215c7540357f1c9cc3463f0ee26f3a7e","sha256":"b20ac9441c6cdbfc7e463bda53029740648fead964f93d86b8f6f905137d1ba4","sha512":"dd02cf7bd3182c6527b30ae3dbf4e43a7841acdc195267920cfe58f3be0e2a588cc8361b0b1e781f211c96937e7be9a2c8e24fba4c99f6fbdec0b088b814f34d","ssdeep":"","tlshash":"af8000b0220ca3020380222c282c302c80b2e38fa8caa3c000003ce2f822e82e8b02b0","size":33,"data":"","first_seen":"2026-06-20T17:47:14.108867Z","last_seen":"2026-10-10T22:14:53.614124Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"190517d92036873c98ce427525544fcd","sha1":"67f2a0928c973535dad14377243d22a0abab1f34","sha256":"7ac8f8c62b5e10d35fe1f13fb2ef6af16c7604ba19527d9112328998fb4a5e86","sha512":"d3ecd31e97d2d537f6baa5a3a110b2655b4eac9c7ac7b5211f886ee3f61133e9be65e4757157dba398ef5075c3b2833928244850f9553cd4a72ed68fbdf35965","ssdeep":"96:uhW3yhAjPPsjN2q2h6PzV7yp7aLSxpCa8fQ+iRCa8fQ+rCa8fQoVCa8fQh0CbLP5:MhAgjN2q2uQpiiRirkViE/z","tlshash":"f6c1a35d0a417469d763533bcae3b3851f7b8704620b2a5ca5390eacb912936012bfdc","size":5813,"data":"","first_seen":"2026-10-10T22:14:53.615156Z","last_seen":"2026-10-10T22:14:53.615156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"57ad2fa8c9c139f789c26dc0186e985b","sha1":"ae521a6bb6d50ad5ebec65f39621be3f611a49c5","sha256":"60d9e1a76229c949ce8fd2cf46eec91d7c59883bbd67373d115002b7a6fbad5c","sha512":"e0a88d0b9d6f7c579416bd5f2b0e5ccb11b53a854ff5304476658300b93e371048153a13cfed1d51b7e5d04c27270376728267eda27fbdf363e7feb35a093431","ssdeep":"","tlshash":"26d0c9c337d23013b81151fca7e3f91e5063c2a1057140a5c06e48e731d0982475fb75","size":233,"data":"","first_seen":"2023-04-11T18:45:34Z","last_seen":"2026-10-10T22:14:53.616945Z","times_seen":655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/museconfig.js?crc=4242129463","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c1fcd88e2afd61a315233fff907b04f","sha1":"2d567db05f2077ed5660016686893b90c4c7af39","sha256":"9a0644a7c3a5c0694008e07699e042781c17e96fb3b4df832c3db028d4a3cc1a","sha512":"3f34450cdee4f000136e93445d8193dae79b18e5d635f284bd54597a17ad89c849944cb8126c4e4d05fad1717b50d40e5605b90c2d3c11f811ba138b274b1a89","ssdeep":"","tlshash":"a941330e2d64a63d117110b3c425c1c929f56b3bb723cc9cd3fbe4992b78fd105a0929","size":1966,"data":"","first_seen":"2025-08-19T04:14:04.615697Z","last_seen":"2026-10-10T22:14:53.55966Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery.watch.js?crc=141170477","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"705f10d266be292af2064d8835e61805","sha1":"d026d4004aa90fb0aece126faca5e6f5d0c04bf1","sha256":"ec0c27c4b27e997361ac4fa8d6cf38f5905fb126070a481540a5b852aa90dfc7","sha512":"163d7ac383cc98d6af059afc6c7f4eab23925983e144a852f688d8eb69a08ff529c99ee00b23b147872e8f7c56e84b73cec5408e61a4e42ae8c5b7e50dd5e75c","ssdeep":"","tlshash":"1531879872db38294aa31971543f844db436d73beb8e8804671aa9f92df0d0c1067f78","size":1816,"data":"","first_seen":"2024-10-26T04:46:56.838451Z","last_seen":"2026-10-10T22:14:53.553194Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery.museoverlay.js?crc=478602674","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9ffc51c731a722a53c581923f610b7","sha1":"a72ff27b642622876eb2364ab9845406b56dd29d","sha256":"3b79fc1b1506a4e9b1440a45521a51bfffb70a29dacdf3df4d1a440617022f01","sha512":"a7ccc63cccea1bfd2167b25d57cb7a4fb817fde6cd260593c5c2d48d686d1833fafb9b5644354490ab8c9b18a8a7f47edb7377c32ff09365e82d258d5f0e11a6","ssdeep":"96:3CZyV75fENaIDr2LGpwCUvy0c8VpxUJGESGKXymugX1wwD:x7sH/wHfVpxUJydymuA1X","tlshash":"48a1857cbb50352b96ffa075d81bf54d52328b76bb1348926039c0a9dd70f021672fa8","size":4947,"data":"","first_seen":"2024-10-26T04:46:56.843659Z","last_seen":"2026-10-10T22:14:53.574713Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery.musepolyfill.bgsize.js?crc=376823407","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"83dd50c45d3e75b031d4bba8eca8d72c","sha1":"4302f7633ed2f8653a0e3095072fa291df2d73c7","sha256":"9f9b83b274cf77a0a44e5a236a0cd25e630c513141b8ab7e8ad7a56692da0b21","sha512":"7c8aa73fbb2a8f373b297484f26101e1d3bee7faceb7b9cd31dc2aade54f42fc77b73a69b54c53d126fb597d0ef8215a51f9c154491b5341852f965a9102a13c","ssdeep":"96:3CZyGxAEZp4QbV/9EHNLA9Q9nHXwipsa77z3swI0Z7987dgsv0w80MFQ9Ny7c0ch:IX1EHN89Q9nHXwijDswIEmxMP0MFQ9NH","tlshash":"7ab1b744a3522427f58796a7502ea10931355c298f03cb7aa0bdd8fdad48cd631fbbb8","size":5091,"data":"","first_seen":"2024-10-26T04:46:56.822035Z","last_seen":"2026-10-10T22:14:53.603988Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/whatinput.js?crc=86476730","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ac8b2f87c556034502df588ae5c8911","sha1":"79293ef088c8cb5e6c6b4eccd3e9a5a9f674d968","sha256":"cd3bb09aa0c8cefc335a5fe066c1dc1165914f248f853eb08d2998a68d24bf7f","sha512":"effcdad53df1724e1c3c2ea1ca5d0f13eb0cd95bd83114ae9f00ed0e627ba3526a8eb35fd8ee63d5143ea2231e9d95b8037546f472322c710c174ff3bfcd59c9","ssdeep":"","tlshash":"3b31462634077d371a13672162bfe10260278593348a040196eec9b837f9ebca6bfb5d","size":1708,"data":"","first_seen":"2023-03-07T13:21:32Z","last_seen":"2026-10-10T22:14:53.602505Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/webpro.js?crc=4069187952","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"42b11f066aa537ac895e1123a9953fb2","sha1":"239b95578d8f3992a281be51e1b77cd73cbcbfe9","sha256":"695f7ea7d804c0e0c7f6d7cbab40080ed2bc5eaba905f84e1867ea8d4f6181a1","sha512":"3696e0d37a6b1c08f9217cd84ffc063f501a5252b0ef887fcb5a88205906b4655ac9eea03d9213959c11cb57439c2929371e1d50a54d497a10f361d621bfa90c","ssdeep":"1536:PrtponRYzrexNqZwQiGjULGgLRSTTszUZnXlls/PkbLG5AULsBHqY:DtponRMr7GbTsMMGTUb","tlshash":"3e23b84c72c0269145efb171002fc50a2135ea78ee0a995c747992e99ffce896137f7e","size":49456,"data":"","first_seen":"2024-10-26T04:46:56.827655Z","last_seen":"2026-10-10T22:14:53.5361Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/touchswipe.js?crc=4065839998","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac3a421fcf289e1e58a5562863be4e9","sha1":"dc9949475cb3802043e1d56f5e912dfc4a8a20b0","sha256":"596ea16512b00c8a7d8c55bf6c9e00034d15f699a8fb2da601dd273e18446c06","sha512":"13aa1ab79023b960ec8644788fdd3e04062b198369fb4b13b2344695e0380daddf66a4d4f9f665f384d8ad338590f0d72b5c75e3d44bf5b71b93a7900fe31382","ssdeep":"192:g1S746EvxhUo5tY5mlrNIz7+1D15N+t6tq/zcdC1aP3yu7/YZ94c1fv8c1Pem:g1OEwoc566KD1i/zq37I9bfkc1Pem","tlshash":"1622fac973623cc3a57953a1d11b4f0ba01e9d1b1e0b586894b9fe90f93007993abf54","size":10080,"data":"","first_seen":"2024-10-26T04:46:56.835343Z","last_seen":"2026-10-10T22:14:53.530727Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/museutils.js?crc=407482107","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7bab1cc70f814e5e52cc0d123e8df15","sha1":"b3b5e48bb19e8b4fc2a0b9673c1c27afca4f481a","sha256":"a977f55df4545a40154ce6593be8d6b1697792e0ca9f5cd3b805a9c7fbda4b8b","sha512":"9d4a23b08b7fecf4d6b8ba4717493e71b1d092539f8e81d4eb71889fb3d2849de65da5e97013865b6c8c81695c7332e1977406eba6443efbe96f4fbb5cdb7c1f","ssdeep":"384:seyxhfBKyhVdhOEVoaB7VYH0OyxcFwJan5tuvZTdc6tBw5b1rLWe2hUfmC5pwd4M:KrhOEVog7VwyKFwoXuYWe2hPd4oQcl+o","tlshash":"4a03e69cb2453922dba77ef7502f060670332429d907aeb8a275d5e42d78d4b01bbf6c","size":38777,"data":"","first_seen":"2024-10-26T04:46:56.815574Z","last_seen":"2026-10-10T22:14:53.55143Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/ik/-PRdr5HLQaWCm4tVRlMPokBd0IWGMVNaCknGDgTQH1Gfenbgf4zxc3XPHQJaFDJUFRJaWh9hwRIoFDm8wR6uFe9X52IDF2iRjRJtZQSXFQyRjAIaeKq7O1iaihmKOcFCdamqOYiaikoaiai8jKoRdeNuZfUaiai8jKoRdeNuZfJIdWmC-PJHZY4z-AblShB0SkG4fHZ_IMMjgfMfH6GJNEbfIMMjgKMfH6GJvEbfIMMjMKMfH6GJzwGfIMMjffMfH6qJRMGbMs6YJM4HgIuuShAbMLrJzrCB.js","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d9edf83e9a258574f87fae3c2524eef","sha1":"00c9e8e0f9b6e5c938a7317cedeb6032ee43caa4","sha256":"9537eb5abb8b73e4c50801b576320538e700534d18c8a284edc57772d70488d7","sha512":"5c9b88aea56b7bbe7ea4f69f0d5911f0dc0aa584f496b5158047afa0cd8bf0ccf7b4fa2aabc496c39cb0aecdac5f1e8ef06bc666fee373401234e56ebf42d711","ssdeep":"384:2cO2hpIgIVsUGiRm4lIeU4iDFeFs2NdFJsQF+i:2cO7GiRm4X0JqsG7Ui","tlshash":"f582e83e7252707ac19391f716bf3249b43ab90978c094a9b640d8e8dc74db5021af78","size":17653,"data":"","first_seen":"2026-10-10T22:14:53.572908Z","last_seen":"2026-10-10T22:14:53.572908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/require.js?crc=4108833657","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a4f2daeee86abb010f0d0c2a9495e36","sha1":"ae967d3f9112235b1345e7a7753310b1eece42d4","sha256":"c5363fea5473ad47168d27ae63e5d550bd5f649f3f85c4ae211dca4b605623c2","sha512":"deb2f5d43de847fc7b6624bae051d10bdc7142af9003c2676f2bdfbbefd2fef9c9db41b86b4b1284e5f0afe14bd2a8a45c45054386174cbdc6cd8ad8eb3d270b","ssdeep":"384:zUbpmZoA5r2uXWiLFLkIqv74CLFrgxBUpg/g/XmxLSkg:0WoGr2hiLFIeCprwug/g/XmxL5g","tlshash":"4472d5ee3ad2b803b66539e050bf404b2277dca3754cc4a0f149d8e0adb81699677f38","size":16383,"data":"","first_seen":"2024-10-26T04:46:56.79621Z","last_seen":"2026-10-10T22:14:53.605663Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery-1.8.3.min.js?crc=209076791","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af66a835a711f5eec9fe149058ea217","sha1":"f94556a27d79c8bca49b592b4b0c4ef89a7d4c33","sha256":"b8e1e0d524334ab674698fbf823a05eb576c197ca9c6aecaad0daa6c9bbfc178","sha512":"6ec4dcedc9cafedd4d4d9d802748ee14a61ed008ae7234ce2d0f6631b8975b2f60eeb711cf2265b68160f708fbd88d5f00b221e192f4f7443ac639281bfac207","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5L:O+vIklosn/BLXjxzMhsSK","tlshash":"c793f8ed73c6717243ab31ae40afa10ef1365869280d8410f129e8f9bc75a499277f7d","size":94113,"data":"","first_seen":"2024-10-26T04:46:56.811364Z","last_seen":"2026-10-10T22:14:53.561966Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Typekit: the domain \"1010.archi\" isn't in the list of published domains for kit \"27721627_e621975e2854e481347cb28e7458caa7\".","filename":"https://use.typekit.net/ik/-PRdr5HLQaWCm4tVRlMPokBd0IWGMVNaCknGDgTQH1Gfenbgf4zxc3XPHQJaFDJUFRJaWh9hwRIoFDm8wR6uFe9X52IDF2iRjRJtZQSXFQyRjAIaeKq7O1iaihmKOcFCdamqOYiaikoaiai8jKoRdeNuZfUaiai8jKoRdeNuZfJIdWmC-PJHZY4z-AblShB0SkG4fHZ_IMMjgfMfH6GJNEbfIMMjgKMfH6GJvEbfIMMjMKMfH6GJzwGfIMMjffMfH6qJRMGbMs6YJM4HgIuuShAbMLrJzrCB.js","line_number":37,"column_number":110}]},"http":[{"url":{"schema":"https","addr":"1010.archi/scripts/touchswipe.js?crc=4065839998","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.483Z","timestamp":1791670435483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/touchswipe.js?crc=4065839998 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68d-2760\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10080,"size_decoded":4101,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (532)","md5":"2ac3a421fcf289e1e58a5562863be4e9","sha1":"dc9949475cb3802043e1d56f5e912dfc4a8a20b0","sha256":"596ea16512b00c8a7d8c55bf6c9e00034d15f699a8fb2da601dd273e18446c06","sha512":"13aa1ab79023b960ec8644788fdd3e04062b198369fb4b13b2344695e0380daddf66a4d4f9f665f384d8ad338590f0d72b5c75e3d44bf5b71b93a7900fe31382","ssdeep":"192:g1S746EvxhUo5tY5mlrNIz7+1D15N+t6tq/zcdC1aP3yu7/YZ94c1fv8c1Pem:g1OEwoc566KD1i/zq37I9bfkc1Pem","tlshash":"1622fac973623cc3a57953a1d11b4f0ba01e9d1b1e0b586894b9fe90f93007993abf54","first_seen":"2024-10-26T04:46:56.835343Z","last_seen":"2026-10-10T22:14:53.530727Z","times_seen":4,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/call_soul.jpg?crc=17897193","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.735Z","timestamp":1791670435735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/call_soul.jpg?crc=17897193 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2019285\r\nlast-modified: Wed, 04 Sep 2019 14:12:07 GMT\r\netag: \"5d6fc637-1ecfd5\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2019285,"size_decoded":2019662,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 4917x3283, components 3","md5":"235a48feaea5025bf4e6c0768cd64594","sha1":"04a2428202db4f6ef060a2aa0ed1cf1d91fbbfde","sha256":"600143af308cd03ab2f2482d0abfb34f2bbc7b811e60ad8448ce5c48b49e059c","sha512":"e4e2314299a7248d4cd6a1da6cdeb71a70f0034ae4ea455c67d89f51b0fe0ae018986352fc8dfe75ea83487d03513a42ab63fae24f9cb83f31f5349ceb13ca86","ssdeep":"24576:m5v6uryuhXjXrN+FhVH+SauMBezhDyHPwMAKEc5b:m5yuryuhTX4taLBgy4hpEb","tlshash":"652500355e2e03c94ac778434750ed72c3345f984b622ff2ae253b6c146ed5a88296bf","first_seen":"2026-10-10T22:14:53.53383Z","last_seen":"2026-10-10T22:14:53.53383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/webpro.js?crc=4069187952","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.479Z","timestamp":1791670435479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/webpro.js?crc=4069187952 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68d-c130\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49456,"size_decoded":13079,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (562)","md5":"42b11f066aa537ac895e1123a9953fb2","sha1":"239b95578d8f3992a281be51e1b77cd73cbcbfe9","sha256":"695f7ea7d804c0e0c7f6d7cbab40080ed2bc5eaba905f84e1867ea8d4f6181a1","sha512":"3696e0d37a6b1c08f9217cd84ffc063f501a5252b0ef887fcb5a88205906b4655ac9eea03d9213959c11cb57439c2929371e1d50a54d497a10f361d621bfa90c","ssdeep":"1536:PrtponRYzrexNqZwQiGjULGgLRSTTszUZnXlls/PkbLG5AULsBHqY:DtponRMr7GbTsMMGTUb","tlshash":"3e23b84c72c0269145efb171002fc50a2135ea78ee0a995c747992e99ffce896137f7e","first_seen":"2024-10-26T04:46:56.827655Z","last_seen":"2026-10-10T22:14:53.5361Z","times_seen":5,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/css/site_global.css?crc=384654408","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.799Z","timestamp":1791670434799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /css/site_global.css?crc=384654408 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Sep 2019 14:11:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc62b-1d40\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7488,"size_decoded":2408,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7484), with no line terminators","md5":"f2fff0ca685ae1759e30a69b8c537906","sha1":"1686238296f804affa8646a9fe26c14d82abe19a","sha256":"81a05bd2b4f42953ed846674389d3bee42e8e6fea0d3f5478009eb512a0b7c75","sha512":"cba1b536eaf45cdb3a9c0c9245c777fb85b11ca04ed586a60abdf4fd238c0398e7186f712ef656450630c32986e482ce848828a846706f9a30aeaf5838c8899a","ssdeep":"192:L+2z/nxq0Uzit5++nZc1+iRBWKO13S3Y5Y1tr:su5++W1sKO13S3Y5Kr","tlshash":"31f142265310198990b3cf273f8e5794142ce157ace38aadf577ca1ec9c70992f62f14","first_seen":"2026-10-10T22:14:53.538205Z","last_seen":"2026-10-10T22:14:53.538205Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/css/master_a-master.css?crc=284668692","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.801Z","timestamp":1791670434801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /css/master_a-master.css?crc=284668692 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Sep 2019 14:11:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc62b-9df\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2527,"size_decoded":888,"mime_type":"text/css","magic":"ASCII text, with very long lines (2527), with no line terminators","md5":"34ecde278ff07fd48c9a93a422c20f8f","sha1":"2807dc7b5a1046366ad9face85a8f21bd459bf95","sha256":"23125125743ed449e40641cdac7fda62a590f9101f704020ba13b6b43ecffc71","sha512":"2c566150ce42e8a26d694954590905a2b23565c8a7a8c5045d1348184302f16cd8170ee0717b353efa60821cadee978beb493e86957bbc5b93cd2f2eef66a853","ssdeep":"","tlshash":"d9518b22e49f442f715b48b530e0f94a204bc886b01b4b75f61f64f6ce874de2b62307","first_seen":"2026-10-10T22:14:53.540027Z","last_seen":"2026-10-10T22:14:53.540027Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/were-tenten-text.png?crc=3847343201","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.824Z","timestamp":1791670434824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/were-tenten-text.png?crc=3847343201 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 14274\r\nlast-modified: Wed, 04 Sep 2019 14:13:26 GMT\r\netag: \"5d6fc686-37c2\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14274,"size_decoded":14646,"mime_type":"image/png","magic":"PNG image data, 485 x 70, 8-bit/color RGBA, non-interlaced","md5":"c07d39f2a605af253718c941031b5954","sha1":"9837e1b3684c3947942c19794432d24b1abe931f","sha256":"311db7a5879502cb352af90450da3013c314efe19f68a0bca0391b81dbd101b6","sha512":"bd3e7e1d0dfef7e89e1c232ecf7817de3d5ee6e7839edf571d225bc0bbc9872ed98af443bbbd154c729bee1bf4d65b09c425961ce314150f7cf835c583843b01","ssdeep":"384:tX5M5S+7HDDGHBugdEi5B1NjjBm2wPXKxHQicbSQp9:Zq5NHmhuYEY9/BmBvKxHQiMp9","tlshash":"2e52d1378ad875d239d373a73ee42860cc242a46eeaedb601825fcc716053da16e1d93","first_seen":"2026-10-10T22:14:53.541933Z","last_seen":"2026-10-10T22:14:53.541933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/thegamedowntown-51-crop-u7267.jpg?crc=4102626558","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.826Z","timestamp":1791670434826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/thegamedowntown-51-crop-u7267.jpg?crc=4102626558 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18110\r\nlast-modified: Wed, 04 Sep 2019 14:13:17 GMT\r\netag: \"5d6fc67d-46be\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18110,"size_decoded":18483,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 224x118, components 3","md5":"6a592835795e536472ef824730b9bc1a","sha1":"414fc94ad8c6f9c02724a0a5ff51449467a36782","sha256":"fb331e1d65cf1ca0a58ed0dbc200bed80ce9bbbe938074ac66cbe495046ea80e","sha512":"a7e09cd4892d9599715814dc3bfb33281d3b24fb68fae064bed421a15abc0563e03401d2de726ac25766ede6709f563acb647a98d123955ad24209b1e7febc40","ssdeep":"384:4YNg7wbM64+Bcycy1WcltDSXmfUlddEri0Pp7r8VNf6TkJagi:4Yy4oycAltOQUlLE2uuN6kJaT","tlshash":"c582c03aee555eb5ecf9eb742480dff8d6e223b653637b8a9350974b31011410e0b25d","first_seen":"2026-10-10T22:14:53.543579Z","last_seen":"2026-10-10T22:14:53.543579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/instagram-logo-3.png?crc=240659649","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.381Z","timestamp":1791670435381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/instagram-logo-3.png?crc=240659649 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/css/master_a-master.css?crc=284668692\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 755\r\nlast-modified: Wed, 04 Sep 2019 14:12:24 GMT\r\netag: \"5d6fc648-2f3\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":755,"size_decoded":1124,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit colormap, non-interlaced","md5":"70dcd32700f6dcfe8a46a892788ebca1","sha1":"301deeed30da5cd4c1df0acdad52502dc66bc800","sha256":"13225eb937984399a6aab750d6652461a0db6d5714816d14f155fd569f0865cb","sha512":"456a93c2c8c2ec7afe2fc3f46d7237680def5c36db5b46c10cb63302f5cf200a8ab7ebbba77255700e47027250c96144904396946c69181c13c0d343b30fca06","ssdeep":"","tlshash":"f601ccd3f554b994bec34105c047bec106162c5cdb0025575139bf3e9c7f350c842550","first_seen":"2026-10-10T22:14:53.545165Z","last_seen":"2026-10-10T22:14:53.545165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/blank.gif?crc=4208392903","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.818Z","timestamp":1791670434818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/blank.gif?crc=4208392903 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nlast-modified: Wed, 04 Sep 2019 14:12:04 GMT\r\netag: \"5d6fc634-2b\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":410,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-10-11T05:44:13.248741Z","times_seen":103113,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/hi.png?crc=426809964","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.821Z","timestamp":1791670434821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/hi.png?crc=426809964 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1940\r\nlast-modified: Wed, 04 Sep 2019 14:12:23 GMT\r\netag: \"5d6fc647-794\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1940,"size_decoded":2310,"mime_type":"image/png","magic":"PNG image data, 383 x 303, 8-bit colormap, non-interlaced","md5":"733855af828f90003e47f27f75047a0b","sha1":"1982a6f75c9a72508e4cd03cfe26be78398682f7","sha256":"62879729a52100b0a271db2592edbd0859a00f53880ae9a6ddb9b7f21856eff1","sha512":"dd8441989cbcc7bcdf7928830c5941439225ffd0379353608023934e1e8e033adff4363d3ff6926619c70acef6d0efbbc095ab5a0cc5bae3512f6ebf4d58d66f","ssdeep":"","tlshash":"7c41811999e354858edccb68c3244de1dbe6cbdc231be20947c34a042fd67c60143b85","first_seen":"2026-10-10T22:14:53.549027Z","last_seen":"2026-10-10T22:14:53.549027Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/favicon.ico","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.418Z","timestamp":1791670435418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83800,"size_decoded":14389,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-10-10T22:37:25.92257Z","times_seen":1940,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/museutils.js?crc=407482107","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.475Z","timestamp":1791670435475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/museutils.js?crc=407482107 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68c-9779\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38777,"size_decoded":11835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (639)","md5":"c7bab1cc70f814e5e52cc0d123e8df15","sha1":"b3b5e48bb19e8b4fc2a0b9673c1c27afca4f481a","sha256":"a977f55df4545a40154ce6593be8d6b1697792e0ca9f5cd3b805a9c7fbda4b8b","sha512":"9d4a23b08b7fecf4d6b8ba4717493e71b1d092539f8e81d4eb71889fb3d2849de65da5e97013865b6c8c81695c7332e1977406eba6443efbe96f4fbb5cdb7c1f","ssdeep":"384:seyxhfBKyhVdhOEVoaB7VYH0OyxcFwJan5tuvZTdc6tBw5b1rLWe2hUfmC5pwd4M:KrhOEVog7VwyKFwoXuYWe2hPd4oQcl+o","tlshash":"4a03e69cb2453922dba77ef7502f060670332429d907aeb8a275d5e42d78d4b01bbf6c","first_seen":"2024-10-26T04:46:56.815574Z","last_seen":"2026-10-10T22:14:53.55143Z","times_seen":10,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery.watch.js?crc=141170477","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.477Z","timestamp":1791670435477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/jquery.watch.js?crc=141170477 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68c-718\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1816,"size_decoded":1242,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"705f10d266be292af2064d8835e61805","sha1":"d026d4004aa90fb0aece126faca5e6f5d0c04bf1","sha256":"ec0c27c4b27e997361ac4fa8d6cf38f5905fb126070a481540a5b852aa90dfc7","sha512":"163d7ac383cc98d6af059afc6c7f4eab23925983e144a852f688d8eb69a08ff529c99ee00b23b147872e8f7c56e84b73cec5408e61a4e42ae8c5b7e50dd5e75c","ssdeep":"","tlshash":"1531879872db38294aa31971543f844db436d73beb8e8804671aa9f92df0d0c1067f78","first_seen":"2024-10-26T04:46:56.838451Z","last_seen":"2026-10-10T22:14:53.553194Z","times_seen":10,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/musewpslideshow.js?crc=4044861007","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.480Z","timestamp":1791670435480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/musewpslideshow.js?crc=4044861007 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68c-487d\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18557,"size_decoded":5676,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (547)","md5":"aafcc57d41a3d6c05b0b83feaba8262d","sha1":"0e87f15fa41717602c4164faef87cb67a0a3d0c2","sha256":"7de7c62ce44133d9632be523af854262d653d3f09131e33b60970ac8d4d781f3","sha512":"fc7ddab3f09e10f8fd1ccde04c33b6a31f0b1d33e89eecc64b14ed1a3f1938df8d77f7e1e82082bedb12bd06899ea67d391bff428936f555be92d6877026ad55","ssdeep":"384:DRHFZ3BFpXyo5dZcXtGSCzhr1oKHr/30sop1xQ51OUT7A9Z8:DJFFBFxyobZgkzoKHr0sop1xQ51fIX8","tlshash":"4a821a28fa50395480ff74b3e01fa50d32b2aa349f039d55797a81a54c78e8d2573fad","first_seen":"2024-10-26T04:46:56.830428Z","last_seen":"2026-10-10T22:14:53.554821Z","times_seen":4,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/loading.gif?crc=3815509949","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.591Z","timestamp":1791670435591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/loading.gif?crc=3815509949 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/css/index.css?crc=204075234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2892\r\nlast-modified: Wed, 04 Sep 2019 14:12:24 GMT\r\netag: \"5d6fc648-b4c\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2892,"size_decoded":3262,"mime_type":"image/gif","magic":"GIF image data, version 89a, 128 x 15","md5":"f303b497ec7dcba37611df86e953c481","sha1":"4975962cac5846449982f49f3876470cbf205074","sha256":"231efba277adaaf65df7e61d3f4aeeb9bde21bb7b955d6fb93d090676a0036b8","sha512":"5b1301787d4928ca6a7b9295339539f37928546ef00b9e1c07d8ad152e2586c9a807193424c655028016cb447121ce94a2e43fc57764c0dd558bc7d4cd9c5f34","ssdeep":"","tlshash":"9751fac7c1c2ed21ebaad73aa55f1fe90cc852f285d96e053e510c69ec3405879c839a","first_seen":"2023-05-06T07:45:35Z","last_seen":"2026-10-10T22:14:53.556711Z","times_seen":294,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:13:53.746Z","timestamp":1791670433746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Sep 2019 14:11:53 GMT\r\netag: W/\"6437-591bac96f1c40\"\r\nx-httpd: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]}],"data":{"size":25655,"size_decoded":6356,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (550)","md5":"0800a43fa91e1b6a1d405829c7229e48","sha1":"5efc71cca1ff68ac9510392e3b48598453491e3c","sha256":"94dec3084f0aa14b7279025542bfcfb89d36f0586f602703a87856ef5cc7e28c","sha512":"3b65cce0f60df492998611cf90b461ae48d410d5d494ab19173f884d99b5168d862a98cd3f02e1c4e86b6525ba0d0c2c8ccd559bdb9d77cf0e4162752113d9ae","ssdeep":"384:nmfSP3UAzb+z5Z+CIlcwCqg9VSxC1ToVT8yDAgZQkG:nD3UAzyz5Z+CIlcP1ToVT3RmkG","tlshash":"d6b265200afe10b771938299bafa6e6e7ea1dd07970f061075ec09d4bfc3d96995318c","first_seen":"2026-10-10T22:14:53.558095Z","last_seen":"2026-10-10T22:14:53.558095Z","times_seen":1,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":692,"connect":27,"send":0,"wait":26,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/museconfig.js?crc=4242129463","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.431Z","timestamp":1791670435431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/museconfig.js?crc=4242129463 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68c-7ae\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1966,"size_decoded":1200,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1424)","md5":"1c1fcd88e2afd61a315233fff907b04f","sha1":"2d567db05f2077ed5660016686893b90c4c7af39","sha256":"9a0644a7c3a5c0694008e07699e042781c17e96fb3b4df832c3db028d4a3cc1a","sha512":"3f34450cdee4f000136e93445d8193dae79b18e5d635f284bd54597a17ad89c849944cb8126c4e4d05fad1717b50d40e5605b90c2d3c11f811ba138b274b1a89","ssdeep":"","tlshash":"a941330e2d64a63d117110b3c425c1c929f56b3bb723cc9cd3fbe4992b78fd105a0929","first_seen":"2025-08-19T04:14:04.615697Z","last_seen":"2026-10-10T22:14:53.55966Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery-1.8.3.min.js?crc=209076791","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.469Z","timestamp":1791670435469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/jquery-1.8.3.min.js?crc=209076791 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68b-16fa1\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94113,"size_decoded":32738,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"0af66a835a711f5eec9fe149058ea217","sha1":"f94556a27d79c8bca49b592b4b0c4ef89a7d4c33","sha256":"b8e1e0d524334ab674698fbf823a05eb576c197ca9c6aecaad0daa6c9bbfc178","sha512":"6ec4dcedc9cafedd4d4d9d802748ee14a61ed008ae7234ce2d0f6631b8975b2f60eeb711cf2265b68160f708fbd88d5f00b221e192f4f7443ac639281bfac207","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5L:O+vIklosn/BLXjxzMhsSK","tlshash":"c793f8ed73c6717243ab31ae40afa10ef1365869280d8410f129e8f9bc75a499277f7d","first_seen":"2024-10-26T04:46:56.811364Z","last_seen":"2026-10-10T22:14:53.561966Z","times_seen":10,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/6qendrimi.jpg?crc=3945708232","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:56.049Z","timestamp":1791670436049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/6qendrimi.jpg?crc=3945708232 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1439049\r\nlast-modified: Wed, 04 Sep 2019 14:12:03 GMT\r\netag: \"5d6fc633-15f549\"\r\nexpires: Sun, 10 Oct 2027 22:13:56 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1439049,"size_decoded":1439426,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Windows), datetime=2018:04:14 21:15:57], baseline, precision 8, 1920x1080, components 3","md5":"3fd09b00aaea810edc33ffde19b2238f","sha1":"090793b9c20840cc619fcabe76109b914995ef7c","sha256":"c545d4c1b9c632f37ad7ef51908336a36dc5002afbf84d476283aff5b114f1ca","sha512":"657f59bb0188aefd4d1a89e9636ae17a6c93ab2cceb63d630a7607ddbaecc8d6426d581cbe12672fd6eb1b3d8df661f1fc8d578ebe73e9921faeca9c4c9fe640","ssdeep":"24576:BerrXBNvR9smol4t9dJkrwnDmbSHhhquwkg:B+Bil4jMASyJwkg","tlshash":"5c252369854adf53eb6d0f7af1be9e972063072708d96311781ef64b2b709c73448e88","first_seen":"2026-10-10T22:14:53.564251Z","last_seen":"2026-10-10T22:14:53.564251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/css/index.css?crc=204075234","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.803Z","timestamp":1791670434803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /css/index.css?crc=204075234 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Sep 2019 14:11:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc62b-4644\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17988,"size_decoded":2682,"mime_type":"text/css","magic":"ASCII text, with very long lines (17988), with no line terminators","md5":"e85de6e19301b2fc36716a4a51d7910f","sha1":"65bafb6238eeef4edfe5ba0704c4a9be1a798e6e","sha256":"aa02fe955971723d4ca3045b0cc21e5f9f96f69665d2623b33aaa74b41e0904c","sha512":"34590098a059bd6fd94766be33e3626a899f1cdb353fbe42aef639e98be33195366386796d90788152e1584bee22296cec45bea55a02580ae8e57f4585a0db7b","ssdeep":"192:sAun5xqVwdngKkpfxlSkny2kqHQ24vU5Z510zhkzqKXsJAolfLZIKwGtrOTFKKCV:MrqVw5gxw227OzqKXsJAolYGkECc","tlshash":"698212209279100df92be127b9e19d8e302aa08376934fffbf5df457de4a580592a3c5","first_seen":"2026-10-10T22:14:53.566643Z","last_seen":"2026-10-10T22:14:53.566643Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/logo.png?crc=405933679","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.816Z","timestamp":1791670434816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/logo.png?crc=405933679 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 4664\r\nlast-modified: Wed, 04 Sep 2019 14:12:25 GMT\r\netag: \"5d6fc649-1238\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4664,"size_decoded":5035,"mime_type":"image/png","magic":"PNG image data, 119 x 43, 8-bit/color RGBA, non-interlaced","md5":"a3e15de7c5d09105d6a9040a90224c41","sha1":"dd8d5c895c2df9e28db2adc2e8e845817308c120","sha256":"60283e840c2c072de20620890c391817ff7cbb2593f8594687be7932880a8399","sha512":"7112cd404da79fa6b8970dac5f1ab42dddfad06bc64e277eadc936f3111db0601fab0ad92876e0f0e244ef22d2e97760efddda973f475567baf8e07953ed9d49","ssdeep":"96:f7/5o52OxbWhMlYLhlyRPhqZRHDtdpnP2+IunzI4dd6C/qMstt19RXRi5DY677:9mVTsPWPodtP2+IA3dd6C/qMFC6","tlshash":"fba18cefb536048a0a7412bb6c7382299d314ffbc042989c3893255e89c6ca2d4e4997","first_seen":"2026-10-10T22:14:53.569208Z","last_seen":"2026-10-10T22:14:53.569208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/instagram-logo-2.png?crc=152744324","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.834Z","timestamp":1791670434834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/instagram-logo-2.png?crc=152744324 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1407\r\nlast-modified: Wed, 04 Sep 2019 14:12:24 GMT\r\netag: \"5d6fc648-57f\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1407,"size_decoded":1777,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit colormap, non-interlaced","md5":"f9c54629a84ad6ab0c4018b72e5cb932","sha1":"778aec03d35048c332354a0793bac89f83345504","sha256":"b2f4ff302fbd52539f136030765239cb847220d782aa0da56819de77c8443f39","sha512":"c620bdf64508353e37a6e769e1ac1d5ea34be8a14b990a8464a7c42a16302aad9d08883ea72ce3e0f276931536be8509771536ea177b4f87b7c1ac169cbf8a68","ssdeep":"","tlshash":"5d2186727311ba219cec9bef8317680a26107e5039763ca5f04ab88a25bad114f7446c","first_seen":"2026-10-10T22:14:53.571282Z","last_seen":"2026-10-10T22:14:53.571282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/ik/-PRdr5HLQaWCm4tVRlMPokBd0IWGMVNaCknGDgTQH1Gfenbgf4zxc3XPHQJaFDJUFRJaWh9hwRIoFDm8wR6uFe9X52IDF2iRjRJtZQSXFQyRjAIaeKq7O1iaihmKOcFCdamqOYiaikoaiai8jKoRdeNuZfUaiai8jKoRdeNuZfJIdWmC-PJHZY4z-AblShB0SkG4fHZ_IMMjgfMfH6GJNEbfIMMjgKMfH6GJvEbfIMMjMKMfH6GJzwGfIMMjffMfH6qJRMGbMs6YJM4HgIuuShAbMLrJzrCB.js","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.33.119.65","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.066Z","timestamp":1791670435066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 May 2026 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6D:59:E1:10:7C:04:87:2C:2B:42:9B:0B:02:BE:4A:FF:E8:09:E3:E9","sha256":"51:4C:B4:20:1D:97:45:B3:FE:50:80:99:68:E9:6C:33:8C:E3:66:B0:8E:BA:01:2F:87:14:D1:BE:86:8D:0E:73"}}},"request":{"raw":"GET /ik/-PRdr5HLQaWCm4tVRlMPokBd0IWGMVNaCknGDgTQH1Gfenbgf4zxc3XPHQJaFDJUFRJaWh9hwRIoFDm8wR6uFe9X52IDF2iRjRJtZQSXFQyRjAIaeKq7O1iaihmKOcFCdamqOYiaikoaiai8jKoRdeNuZfUaiai8jKoRdeNuZfJIdWmC-PJHZY4z-AblShB0SkG4fHZ_IMMjgfMfH6GJNEbfIMMjgKMfH6GJvEbfIMMjMKMfH6GJzwGfIMMjffMfH6qJRMGbMs6YJM4HgIuuShAbMLrJzrCB.js HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: public, max-age=604800\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncontent-length: 6754\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\nakamai-grn: 0.37772117.1791670435.1a1833a9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":7203,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2258)","md5":"9d9edf83e9a258574f87fae3c2524eef","sha1":"00c9e8e0f9b6e5c938a7317cedeb6032ee43caa4","sha256":"9537eb5abb8b73e4c50801b576320538e700534d18c8a284edc57772d70488d7","sha512":"5c9b88aea56b7bbe7ea4f69f0d5911f0dc0aa584f496b5158047afa0cd8bf0ccf7b4fa2aabc496c39cb0aecdac5f1e8ef06bc666fee373401234e56ebf42d711","ssdeep":"384:2cO2hpIgIVsUGiRm4lIeU4iDFeFs2NdFJsQF+i:2cO7GiRm4X0JqsG7Ui","tlshash":"f582e83e7252707ac19391f716bf3249b43ab90978c094a9b640d8e8dc74db5021af78","first_seen":"2026-10-10T22:14:53.572908Z","last_seen":"2026-10-10T22:14:53.572908Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":95,"connect":1,"send":0,"wait":132,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery.museoverlay.js?crc=478602674","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.482Z","timestamp":1791670435482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/jquery.museoverlay.js?crc=478602674 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68b-1353\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4947,"size_decoded":2192,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (554)","md5":"6a9ffc51c731a722a53c581923f610b7","sha1":"a72ff27b642622876eb2364ab9845406b56dd29d","sha256":"3b79fc1b1506a4e9b1440a45521a51bfffb70a29dacdf3df4d1a440617022f01","sha512":"a7ccc63cccea1bfd2167b25d57cb7a4fb817fde6cd260593c5c2d48d686d1833fafb9b5644354490ab8c9b18a8a7f47edb7377c32ff09365e82d258d5f0e11a6","ssdeep":"96:3CZyV75fENaIDr2LGpwCUvy0c8VpxUJGESGKXymugX1wwD:x7sH/wHfVpxUJydymuA1X","tlshash":"48a1857cbb50352b96ffa075d81bf54d52328b76bb1348926039c0a9dd70f021672fa8","first_seen":"2024-10-26T04:46:56.843659Z","last_seen":"2026-10-10T22:14:53.574713Z","times_seen":4,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/doncafe_8.jpg?crc=4234590239","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.747Z","timestamp":1791670435747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/doncafe_8.jpg?crc=4234590239 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1296494\r\nlast-modified: Wed, 04 Sep 2019 14:12:19 GMT\r\netag: \"5d6fc643-13c86e\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1296494,"size_decoded":1296871,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 2880x1922, components 3","md5":"12f95c5bba546b83693af2687b17a5da","sha1":"2da790248a84d4f0d5783d891c5dd5aded490ece","sha256":"12df4cc26a030ad7fd99788085453cb2db3b034f04df013f1d00fd6bdc6d7c70","sha512":"720afc6f8076cc380dd858b1941d9da935abdd31da2b64e42d1266d906a121fad3eb5cfd7a871c4da718213496bcb1ec322771a37b68afe365e09eb82af5f565","ssdeep":"24576:DJfvocpyvZgmP+CyXABfA81/+oxNgxfMTd8gMGhCawFc7yINeY:DJp8ZgmP+CywBfD1rYMTCgMWhwAeY","tlshash":"bb25339a636a1d8be77980a24e528e37e137bc133d010b1e05601a9af57c9ffc979f14","first_seen":"2026-10-10T22:14:53.576955Z","last_seen":"2026-10-10T22:14:53.576955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/null","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.825Z","timestamp":1791670435825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /null HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: EXPIRED\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83800,"size_decoded":14389,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-10-10T22:37:25.92257Z","times_seen":1940,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/doncafe_8-crop-u7556.jpg?crc=4099930376","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.828Z","timestamp":1791670434828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/doncafe_8-crop-u7556.jpg?crc=4099930376 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16282\r\nlast-modified: Wed, 04 Sep 2019 14:12:16 GMT\r\netag: \"5d6fc640-3f9a\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16282,"size_decoded":16655,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 224x118, components 3","md5":"d082f3540be3a4fc7ccef64c94041009","sha1":"65cbdaee2f384a40880d5b4833f7e1bc84b9a078","sha256":"fc0770d45ddfff1c62d4372e68c6ddb9f425bf5c1a7b6af9bc8e6130514579e1","sha512":"1671659b094f3a19ee8d9c14fade9e709e70b1ee4c80eef3302f1910c20b8111238355f57d4a478985a212a78470e2b9dc88161fa4e8612520777106e471c3fd","ssdeep":"384:Ugbp1nE/hqdvYPl2QbdF0VMDA8k6MdYCR3TRHpt7Vp4nFVL8pa70Tj9RS:UO1nEZUQEVh8oOstHpLp4/HcRS","tlshash":"c272d074238a8cd2e9cde3f69975e6e6aa0c747b89a32e06d0140d5773e8cfb8705164","first_seen":"2026-10-10T22:14:53.578715Z","last_seen":"2026-10-10T22:14:53.578715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/priview_foto_mendimrugova%20(13)-crop-u7350.jpg?crc=27166605","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.831Z","timestamp":1791670434831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/priview_foto_mendimrugova%20(13)-crop-u7350.jpg?crc=27166605 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16684\r\nlast-modified: Wed, 04 Sep 2019 14:12:40 GMT\r\netag: \"5d6fc658-412c\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16684,"size_decoded":17057,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 224x118, components 3","md5":"4784707edbe827028159fa101fa95cd6","sha1":"335ca99adb51e0bf4c894bad0f96fd80795db37e","sha256":"ef75234812829a483a68999ca2be732e16727958ddf367e2483dfb107014d838","sha512":"da4bb95a4bbfabc00a590a3c4c75bf264183b0336b6d75e6712a0afb782772d9d78d7905ca897b23f4100ea0da06724866f6f73293cef8a6d1a1b959bfe87dd4","ssdeep":"384:5bjSxIiBYI7mQUkSTttmFRay+sAGjm6lc8LSF:vUYIqQUkSGFRaynDFlcQc","tlshash":"8972d167a0d39d0357ddfb020339dda8d2d01404f19f6e72826a276bb6b7ca09d80e20","first_seen":"2026-10-10T22:14:53.58055Z","last_seen":"2026-10-10T22:14:53.58055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/priview_foto_mendimrugova%20(13).jpg?crc=504811711","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.602Z","timestamp":1791670435602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/priview_foto_mendimrugova%20(13).jpg?crc=504811711 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1033111\r\nlast-modified: Wed, 04 Sep 2019 14:12:43 GMT\r\netag: \"5d6fc65b-fc397\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1033111,"size_decoded":1033487,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 2100x1400, components 3","md5":"d2fa2d4ecb0f4c2c605849ce3137b5a6","sha1":"c4ae3bfc5e7dc18be147a52910887345ea22fe37","sha256":"cc38cf27acdc218d1ee36e2b7fbc3c1516e386c8b94b76e895d5776312794a34","sha512":"7fe5db69452cfcec8a1fdf535b2073da7c848884390a39652a13c5331c42f1f46554923a2917ecdda51b520d62b963e8b0cad53d536ad2d893a80ae702a17e75","ssdeep":"24576:3zMg9YNE4rJQ6YzoDrf8CjzDDd9ajj3kCg9DN:5YJJQezDpY/g9DN","tlshash":"322523537f5401dbc5fd18472b90cf82805682a7f5e21efdb9913fa520ba2479d2aa33","first_seen":"2026-10-10T22:14:53.590479Z","last_seen":"2026-10-10T22:14:53.590479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/thegamedowntown-51.jpg?crc=4108448109","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.604Z","timestamp":1791670435604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/thegamedowntown-51.jpg?crc=4108448109 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 928237\r\nlast-modified: Wed, 04 Sep 2019 14:13:20 GMT\r\netag: \"5d6fc680-e29ed\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":928237,"size_decoded":928612,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 2100x1400, components 3","md5":"dd030c3569e265c3350ebe3687e6811b","sha1":"454d0c8a3f4ce211bd1dc6472c1bf9d12e86fc47","sha256":"63fc32dedfe4a820c965eed870bd88c7c0fb44b7e8aeb6c45b5b9eb40b6d788a","sha512":"608e794e2360850587ffec1aba3aef3e86bac402ff54895e91233a4388d86e6c02634b8dd1983d10d780689c42316927b33bf510b259c2fc4f6f740454b72504","ssdeep":"24576:kh2IwHY2umhZIoXi7edh9X815AJuIB+9Bus:UNBl2zfjuIs9f","tlshash":"67152336ed8e4cc9cc985cf22cc68652e6d805e76a0efca176e0df6135c52bbc41259b","first_seen":"2026-10-10T22:14:53.593632Z","last_seen":"2026-10-10T22:14:53.593632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/null","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:56.110Z","timestamp":1791670436110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /null HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:56 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-httpd: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83800,"size_decoded":14348,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (55220)","md5":"3282565ce91f318e21c86df715d1bc6d","sha1":"e082e007cde9080f12f9fd3927b7f4a61228b1bd","sha256":"b39bdadd90378180927c19f1343682602e430b54f3fc7523c5ac4f46ffd67bc7","sha512":"465c18ce197c8c5262f5bb28e368a0341dad21af19dd77b701f9a5afd3fe88cfea024e8491f7ad0b5decfedd96989f9012d0202ad4e52f74629e98b8506cbbf7","ssdeep":"768:kTAEYPP+UIJz+Fi9/Ltk5YzRubj4he6e9ROg2Geir42nEiERZ6JE0Vo:kTAnmPztk5YzzgK6u","tlshash":"7083efed27601cd9cc9182f237a8204534a7e8eef6504558f25d0ba5bf8759fcab068f","first_seen":"2023-04-06T08:07:41Z","last_seen":"2026-10-10T22:37:25.92257Z","times_seen":1940,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/call_soul-crop-u7330.jpg?crc=3868339753","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.830Z","timestamp":1791670434830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/call_soul-crop-u7330.jpg?crc=3868339753 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11670\r\nlast-modified: Wed, 04 Sep 2019 14:12:04 GMT\r\netag: \"5d6fc634-2d96\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11670,"size_decoded":12043,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 224x118, components 3","md5":"87a854986c332a65f49bb17b2f776e15","sha1":"0513442278f48bcf04104afa988fdf8f3bc47512","sha256":"322045d19628a110f487490fbd195b93b16378b0340f0725b22ba3379af9b1d9","sha512":"5ad2ed501e3b0a3e685437ec3f939bfc9230f81c0b09ec7e6bd681dc83b5aef3269d67ebf71237c42778781d7f315a5a9e030c103987fcecee6d65034e6c3fad","ssdeep":"192:LtbBlLL9UV7FYOvukrEIt1jL+SnTKek6R3hLY+CUQPDjaitlg+7+uL7KJqwCdjG:5bBBL9UV76mt4yDk6rE+RQbjaag+riIG","tlshash":"2932cff3964ded3af9e05c38378ac1159249f0dfa233bd4ba0a2650371a18b881e01ad","first_seen":"2026-10-10T22:14:53.596211Z","last_seen":"2026-10-10T22:14:53.596211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/6qendrimi224x127.jpg?crc=4271294861","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.832Z","timestamp":1791670434832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/6qendrimi224x127.jpg?crc=4271294861 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17260\r\nlast-modified: Wed, 04 Sep 2019 14:12:03 GMT\r\netag: \"5d6fc633-436c\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17260,"size_decoded":17633,"mime_type":"image/jpeg","magic":"JPEG image data, extended sequential, precision 8, 224x126, components 3","md5":"3c057cccb3c50accd14f532d68a60ccf","sha1":"99e4f34d5733608756d833b7e066d1390c699dbf","sha256":"0c371a0f5bdbee0f1f1f6499582b5e32fbf35f17ec7d1f51b4ab19155e6ede34","sha512":"299dd04373c436ac9d6142f1b6ec6ac16364b61e17d4590037ff932a007ee917a15d394d264efbd4aed39b766d34a8b3759c5526f405b7f71aaa45aa2920059f","ssdeep":"384:/YNg7NbbPxthSfH8gVkuCzAyJRWM/Sq2NMSJu4B//99BtjeHiryhwp:/YylPlgVkuCzAoVSqOxjBCHup","tlshash":"1772bfa5ae1a6ed6f9e6a3309870cb92ffc5e056f39350c62020d91734d25dbcf498d8","first_seen":"2026-10-10T22:14:53.598724Z","last_seen":"2026-10-10T22:14:53.598724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/facebook-logo-button-3.png?crc=281819021","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.380Z","timestamp":1791670435380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/facebook-logo-button-3.png?crc=281819021 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/css/master_a-master.css?crc=284668692\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 608\r\nlast-modified: Wed, 04 Sep 2019 14:12:19 GMT\r\netag: \"5d6fc643-260\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":608,"size_decoded":977,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit colormap, non-interlaced","md5":"453fbaf66508680ad1eef909a813d1e7","sha1":"f3cb70146a4c84729a59a4895e3b0eeb0acb1b23","sha256":"a1c79d2bf216aed433211e04e2fa14676bfb25649f00df2ce143920884ab0405","sha512":"275b04d527e15479851ce20d623f9d17da1756abfc83bd683918ab32c1c88a4e119371f96ffa1702c2a295fb26cf7ecfb606d6fb44e6ace582117bdbc8a8f897","ssdeep":"","tlshash":"62f0f1d9cfad882c4e920235e54ed45dbf902c2aba8768090ce5bf3d477778995820f6","first_seen":"2026-10-10T22:14:53.600549Z","last_seen":"2026-10-10T22:14:53.600549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/whatinput.js?crc=86476730","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.476Z","timestamp":1791670435476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/whatinput.js?crc=86476730 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68d-6ac\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1708,"size_decoded":1086,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (525)","md5":"7ac8b2f87c556034502df588ae5c8911","sha1":"79293ef088c8cb5e6c6b4eccd3e9a5a9f674d968","sha256":"cd3bb09aa0c8cefc335a5fe066c1dc1165914f248f853eb08d2998a68d24bf7f","sha512":"effcdad53df1724e1c3c2ea1ca5d0f13eb0cd95bd83114ae9f00ed0e627ba3526a8eb35fd8ee63d5143ea2231e9d95b8037546f472322c710c174ff3bfcd59c9","ssdeep":"","tlshash":"3b31462634077d371a13672162bfe10260278593348a040196eec9b837f9ebca6bfb5d","first_seen":"2023-03-07T13:21:32Z","last_seen":"2026-10-10T22:14:53.602505Z","times_seen":129,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/jquery.musepolyfill.bgsize.js?crc=376823407","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:55.485Z","timestamp":1791670435485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/jquery.musepolyfill.bgsize.js?crc=376823407 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68b-13e3\"\r\nexpires: Sun, 10 Oct 2027 22:13:55 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5091,"size_decoded":2134,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (517)","md5":"83dd50c45d3e75b031d4bba8eca8d72c","sha1":"4302f7633ed2f8653a0e3095072fa291df2d73c7","sha256":"9f9b83b274cf77a0a44e5a236a0cd25e630c513141b8ab7e8ad7a56692da0b21","sha512":"7c8aa73fbb2a8f373b297484f26101e1d3bee7faceb7b9cd31dc2aade54f42fc77b73a69b54c53d126fb597d0ef8215a51f9c154491b5341852f965a9102a13c","ssdeep":"96:3CZyGxAEZp4QbV/9EHNLA9Q9nHXwipsa77z3swI0Z7987dgsv0w80MFQ9Ny7c0ch:IX1EHN89Q9nHXwijDswIEmxMP0MFQ9NH","tlshash":"7ab1b744a3522427f58796a7502ea10931355c298f03cb7aa0bdd8fdad48cd631fbbb8","first_seen":"2024-10-26T04:46:56.822035Z","last_seen":"2026-10-10T22:14:53.603988Z","times_seen":9,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/scripts/require.js?crc=4108833657","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.807Z","timestamp":1791670434807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /scripts/require.js?crc=4108833657 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Sep 2019 14:13:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5d6fc68c-3fff\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16383,"size_decoded":6757,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"2a4f2daeee86abb010f0d0c2a9495e36","sha1":"ae967d3f9112235b1345e7a7753310b1eece42d4","sha256":"c5363fea5473ad47168d27ae63e5d550bd5f649f3f85c4ae211dca4b605623c2","sha512":"deb2f5d43de847fc7b6624bae051d10bdc7142af9003c2676f2bdfbbefd2fef9c9db41b86b4b1284e5f0afe14bd2a8a45c45054386174cbdc6cd8ad8eb3d270b","ssdeep":"384:zUbpmZoA5r2uXWiLFLkIqv74CLFrgxBUpg/g/XmxLSkg:0WoGr2hiLFIeCprwug/g/XmxL5g","tlshash":"4472d5ee3ad2b803b66539e050bf404b2277dca3754cc4a0f149d8e0adb81699677f38","first_seen":"2024-10-26T04:46:56.79621Z","last_seen":"2026-10-10T22:14:53.605663Z","times_seen":10,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/our%20work.png?crc=54148674","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.833Z","timestamp":1791670434833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/our%20work.png?crc=54148674 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 3063\r\nlast-modified: Wed, 04 Sep 2019 14:12:26 GMT\r\netag: \"5d6fc64a-bf7\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3063,"size_decoded":3433,"mime_type":"image/png","magic":"PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced","md5":"8486159fdcfa1320bc782071f554fda7","sha1":"70f989135796cf8453dbdcde95da8e07e0256602","sha256":"bf50cd9ff3343440e828c0451f576b2b7b421f6ed08ae756a4c05f175a46df5b","sha512":"0b9a05991ccd39779ce88e4a21f55829128501301d0613c285c4560be03e174715d69bdc28e495807856fcf2cbc6b4696105090d13b6b01c8bf06a8444757610","ssdeep":"","tlshash":"00514dc6a270e7efc064f27679e0d3f3309538addb6530356241867919f8956027ad33","first_seen":"2026-10-10T22:14:53.607419Z","last_seen":"2026-10-10T22:14:53.607419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1010.archi/images/facebook-logo-button-2.png?crc=308331353","fqdn":"1010.archi","domain":"1010.archi","tld":"archi"},"ip":{"addr":"34.90.54.238","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1010.archi/","date":"2026-10-10T22:13:54.833Z","timestamp":1791670434833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1010.archi","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 02:42:41 GMT","end":"Tue, 15 Dec 2026 02:42:40 GMT"},"fingerprint":{"sha1":"C1:D0:D9:6C:D0:FF:BA:CE:EF:6A:05:92:0E:0C:5A:57:FA:0F:CC:47","sha256":"D7:43:61:AF:6F:7C:56:49:B6:21:A8:8A:7D:87:5A:65:F3:D4:9D:2F:BA:46:0D:7E:36:66:94:DD:84:61:94:63"}}},"request":{"raw":"GET /images/facebook-logo-button-2.png?crc=308331353 HTTP/1.1\r\nHost: 1010.archi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1010.archi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 10 Oct 2026 22:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1337\r\nlast-modified: Wed, 04 Sep 2019 14:12:19 GMT\r\netag: \"5d6fc643-539\"\r\nexpires: Sun, 10 Oct 2027 22:13:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1337,"size_decoded":1707,"mime_type":"image/png","magic":"PNG image data, 31 x 31, 8-bit colormap, non-interlaced","md5":"94e00cf90d3ffacec026545b5213b438","sha1":"b7e1d619caaa98a408722ad3734767be7bc09b35","sha256":"544ea09dd7a461031eec4c95e5988b30e6e4fe82b8d0513751ad95c01b346813","sha512":"11e5f20e774ce0a708ea18f47839bef2d39e61b1340ff04d67c01b1cb42831b5aa7f9f7096a185b3cfcbbf226f7ac40d672bf2d377e322ef5b76173bf10f09b8","ssdeep":"","tlshash":"662178631682ed84c195157a2604d5266874ec50e1207dfba410fff415fae1c3d74aef","first_seen":"2026-10-10T22:14:53.608828Z","last_seen":"2026-10-10T22:14:53.608828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"1010.archi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}