{"report_id":"35a2cfa3-221e-4fad-bb03-074db44bb91e","version":0,"status":"done","tags":[],"date":"2026-09-05T10:00:28Z","url":{"schema":"http","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.193","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"title":"Faces: Smart presentations made with AI","dom":{"size":30502,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18148)","md5":"de114b6970f6061e2d006193fa49a270","sha1":"f2875f21dfe8144f774076a4a4dcf9d8a06dcaf6","sha256":"623a9a5fe38daf54f9dd66d4b9068e1e337408f85f48dcdc6ef2c72db6c47dd1","sha512":"e520fb4fb33bbcc296af489617fb96dc819ad38c75c75e8b93bb2847d7a253597f5c7fbe62ef6ebc8353260e0ddd021259fb78e3f7f6e56b8585d9bb307eae4b","ssdeep":"768:THZuCbq3mhAYw1OXgaHcoEIv2/pLPb0zZmLBM31T8bbWJa/mvlbtGofS/qL83h:ZbBhfw1wpzJa/OSofS/g83h","tlshash":"39d2b55fec05ec205c339dcd82be7e3a248a94b7c635c678b29dcd5817a11b64bc58c4","dom_hash":"domhashf80e20f350c6211b6095aa1cf2d56ccb","first_seen":"2026-09-05T10:00:45.553922Z","last_seen":"2026-09-05T10:00:45.553922Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.193","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T10:00:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"us-assets.i.posthog.com","ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":57965,"first_seen":"2024-02-22T12:48:35Z","last_seen":"2026-09-03T10:52:52.143071Z","alert_count":0,"request_count":2,"received_data":105064,"sent_data":974,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"faces.site","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2026-04-24T07:47:37.275498Z","last_seen":"2026-04-24T07:47:37.275498Z","alert_count":38,"request_count":38,"received_data":4682558,"sent_data":21199,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"3.41.202.174","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2026-09-03T10:52:52.14521Z","alert_count":0,"request_count":1,"received_data":1191,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ga.jspm.io","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2013-03-22","domain_rank":192305,"first_seen":"2020-08-01T13:14:32Z","last_seen":"2026-09-01T00:57:59.22983Z","alert_count":0,"request_count":1,"received_data":42447,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/turbopack-061bqjigylw2p.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43e67413f22e8dd642949075be9452e5","sha1":"bc256a3656a63b782c43fe67da3e451e7733d39d","sha256":"2925b22bfc04b4b3ece00c368ecfbe3029153e1246f4cb4ba0329cb6db5805fc","sha512":"726c9eff9004064f23eac977b530d59b4c44ffe97b7fbe82133ffa994ff963f2e7c2cff2238cec323321e5f71205289d901db705c786c6bc3f814cde79f0f7cc","ssdeep":"192:nnSBvQMElBC8QEsgc+9EilWLO4lg9aWQnZF8BT4FIhcXXqGsov6H:nSBvQMEltJ4lhnZmSIWKJH","tlshash":"c732c8da37a6f07343af91ebc06f4001f17984a9145d142cd3ac98eb28395ae85e7f76","size":10982,"data":"","first_seen":"2026-09-05T10:00:45.612564Z","last_seen":"2026-09-05T10:00:45.612564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/03lns.2s6aln5.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa2361e4b9f739cacadae550a31252fe","sha1":"a07d64b80df3161e2511f169b658f0974bf5753f","sha256":"b99bc78964d2181a5a54272336746334a8ec9777ddd9786a8210b0aea3da7927","sha512":"dfb02ad30de318b0ddce91f18d62480a66723d7f680fdda7b6bd0031c04ad8dc1abb4a30323df865a82f6d3cc7f8720086d100042927206acbd2823103d97a27","ssdeep":"1536:1tqsyfoBmFXzd1O/OxVoba9mR4AUD45kBt348:/qsSF8A9g35A","tlshash":"0a33c8f5b3967132479b1225903a1107f7ba4d90104b8528fa68c9de3ae944ef2f2f7d","size":53055,"data":"","first_seen":"2026-09-05T10:00:45.570506Z","last_seen":"2026-09-05T10:00:45.570506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/12au0naprr76x.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c0b4287ca7c2aabb7e1df5721ffb418","sha1":"c512409d150e514d1f26b3186176a2ad3db72997","sha256":"9ab136d2ecae89c09341d571d2c7b82e59ccc2f14011cedc97b17df573a85294","sha512":"bb72fe0291859907b4cf69f0442b6315e9f28e1a0c08ecc6ab07de62d437d259872ab27a557ead5c3ec2c14d584d2008035e3d89dab5e28a05e1efebadd02dd8","ssdeep":"1536:y4lTA/lw0MXxeYJEBmomx/VGljOIzQal7SgC3yGJMtTYJSncZSGctBi1DuPSBl7z:y4lTYlw7XxDltIiIzigCFincZKBADEyp","tlshash":"f5041adbb679d03246e990e990350003e33a7b4a554c802cf65eddce399d94ea277f3a","size":174534,"data":"","first_seen":"2026-09-05T10:00:45.614039Z","last_seen":"2026-09-05T10:00:45.614039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0ss7l-362m_d~.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cecb6f3e0cd8c732bd0fdbb4e54d8f7","sha1":"864ad160d01a73d44caacc070e0affc6b6da2e01","sha256":"d99baf965e60e7c46db28c9eedaf539177db76448fb67d2011fdb196b7e7b79c","sha512":"800b3f56703799889b5c8fa2a7898da84fdd73d06840a241fd1401cfea507f7f23cdf4f83fafe3dc87da45b5dade10f16f9d68fae01f779021bb119af6cd9a4e","ssdeep":"3072:4W+z9mmbEoXhqZF3OpDeTgPkBQxwR60TGeqA:4P9mmbEoXhqZF3OpqTckCwrGeqA","tlshash":"25e3e7f936d1f48207ab40a6c03f0006f22d4d77189e6860e3e5ddda796465de1b3faa","size":150521,"data":"","first_seen":"2026-09-05T10:00:45.646938Z","last_seen":"2026-09-05T10:00:45.646938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/090_ak1c2ocv7.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9b7144d49760dd2b05fc2f692273dab","sha1":"115f631c9b9fca54e7daca8bcbc2ac0ada300474","sha256":"b3cee6cf661b1c5d0bcf5311bdf1944583ca1b3b57d11023304ea1de073d403c","sha512":"15da344fe0d5f36a6e8fe63d6cdd0bf7184319999ac3f45369faa916771ab540eb2d76c58d1684c92326e7d888ec6f7fef3a3a665b3ab1d20358b6e630a4b4f0","ssdeep":"","tlshash":"483142bcda185097535900fe9163840712722a3a015e86a5f2387cad14a5a16c025eef","size":1464,"data":"","first_seen":"2026-09-05T10:00:45.605276Z","last_seen":"2026-09-05T10:00:45.605276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad989cba151e3594ff12d464f98a83b7","sha1":"fb87c4a0d5d84ed32ee63b3c597853d59b5a3fb1","sha256":"e6693a0eae7114727a6185742072e2b03ea098f91e906644c1714fbd377971ae","sha512":"88f18ba530b581737869c7c4d1de4c29f36b3e57f7e2d34044885a766e9bfae9a2fc6e257491719410f218f4bc52b39fd6031c447b3b3853e0652dadc4c2cfc8","ssdeep":"","tlshash":"7f01c26f709268b1c0226ee50be7705e70733655203586a17e1dc86927ad51ad2c9aec","size":713,"data":"","first_seen":"2026-09-05T10:00:45.656815Z","last_seen":"2026-09-05T10:00:45.656815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8359b1857f3f0fce9d61de2ef43153cb","sha1":"be5f84cb437698c8ad02a950667d2690e3a5df2b","sha256":"f64327584acb0130e31b3151d2af896a7790b8c55ea386eb20cfc7c5f374855e","sha512":"85b8523e7e14d7d26c3e663c9a6e99aba0d441fd6e2b6ba06396a95cfc00a5d707885a952fa40a163ee507e051ebec4d56f098765f9a4cf740030d071a3d3a97","ssdeep":"","tlshash":"f5a002f3d0d25c39907214502ab105930be1631c120881d61b31c85522f1945d642dee","size":66,"data":"","first_seen":"2026-09-05T10:00:45.658771Z","last_seen":"2026-09-05T10:00:45.658771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"352c3d882ed73021045dac6c38857d0b","sha1":"4c01377e35e4db34cff530f9a28639bbe715c602","sha256":"7a0de8aaee39e1e5b1a403ff5c53aa2b3769e110f52d26cf75dda39c1a8bedbe","sha512":"a7e9e5b35ad49af643ae018a68dc142cea7f3656aea5265c0e95ad2a62bf27d8af83998882e18e8661efba6b8a8fb35e80c5ae8c1fd77eb0f383f679458fecc4","ssdeep":"","tlshash":"a111d08bd10efc712c271aa84ffe1cb53b473290c65144013e2dd25c2bd94a2e3917d8","size":1013,"data":"","first_seen":"2026-09-05T10:00:45.66063Z","last_seen":"2026-09-05T10:00:45.66063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-09-05T11:01:51.938395Z","times_seen":250207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8616124eb5ee147f27988cbc36a0dc9b","sha1":"7f3123e10eab4730ba22876e40513f9a60d236ae","sha256":"deb827f70eab43203256d3fae54aad23a69eddf88f8e72dfdb80890960c2b379","sha512":"ed40a58efd4830c75ec155f0cb747d1c2dbbdfab70957c9a271b9fc1aa4e480337bcda4d8ec415438c1c86f4cd41f8a07b4445c370975b547843d6982d0a1584","ssdeep":"","tlshash":"b341e51fe81bf8102d72dd9f562f1fa289e4d83be936416cf65dcdd841b1a324b88884","size":2304,"data":"","first_seen":"2026-09-05T10:00:45.663181Z","last_seen":"2026-09-05T10:00:45.663181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd2b5fb27fbce3d278c78a9cb761ade9","sha1":"ce12e866d72d8f70f28dde652eac69f5228f1de1","sha256":"53b358a94769224ab7991d3672ce71a789480d114c7de5675cb928a209a48f18","sha512":"1553ea0a731cf2826a7e39739d2856eabd952ccccb621d762da270a0b7cddb63d030dc891afdabcae47cc567171bce20dfb66511764cd66f437e198ecaac36f5","ssdeep":"96:L+J9jh/FxfUZ17IUX/68GejSdbqEhwoVTihWv5551SND9UPQgn:MHzUZ5IUX/1G2SdbqEqAGh9UVn","tlshash":"cdb1ee9f7c15de26dc7a7ca9023e5d3924ce883b0391dbb8b69dce28674a0b517d58c0","size":5473,"data":"","first_seen":"2026-09-05T10:00:45.667212Z","last_seen":"2026-09-05T10:00:45.667212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d0425b48ed89b22ab3d08ef0dfc8677","sha1":"8da56258d1eb83b4895c748aa1ebb03cb3019d01","sha256":"0aa92f7f437f96d56fb17a185f5845a81bf8be5ff0794d01ae214fb3cfd6c697","sha512":"146b1231c6d211c0210735fb144a8e20fd42a1e1d0934f58bbaf850d573400579af1e203a8adb8393cb7428614a7567710204c2ad6de3d9a35f28dac481aec8a","ssdeep":"","tlshash":"e281889fe40afc126c3bac9d06be5f7214c994778571967cb64cce880ba2476a7c89c0","size":3840,"data":"","first_seen":"2026-09-05T10:00:45.669629Z","last_seen":"2026-09-05T10:00:45.669629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"122df34515d86e8a5f75aef9c237ba3c","sha1":"2a5503b11febb771bff39626be57d3500c6a422c","sha256":"9041ca1742bdde52666519968c044cf196fad3404fc0cd3be9eda94dbb49ecbc","sha512":"4ef534cbb22b493039052e7d3c0f24251099b5e3d65fd2b3e78b569d1c9ed860ad57a0e850dbf92b3201767f82a4ac9043dc129fcdc542e2a6e0ae0e5ebd407e","ssdeep":"","tlshash":"eed0a7919c03cc1c82564b5638392d2615cd8d740a4699875c84d93dad85d3445b4dc9","size":230,"data":"","first_seen":"2026-08-07T17:49:49.265267Z","last_seen":"2026-09-05T10:00:45.67162Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5267d24edb88a80127eac2165172b7b6","sha1":"31d56715f2da4fe44f44b26d1ce9fec0d1fe31c6","sha256":"868b359cdf45c788780f115fb6b9f28feeacc6758b1f802d700831d06041f89b","sha512":"7dabeb39ea93034ec604c9b31a108bfb6e44c9dd06b84243fa9247a0d2af2652eb6826767457832b5a4fa508bad9671cfa7ec2f08b719fe59a1ca479f34ebaa4","ssdeep":"","tlshash":"9de02bb18c41ff05cfdb1f29093e6c6b30edc215150882c7b484cd6844c69376ec6541","size":300,"data":"","first_seen":"2026-09-05T10:00:45.673857Z","last_seen":"2026-09-05T10:00:45.673857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/16z6.oprq_u3l.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb309c92dfbd19dd8403dde00faba538","sha1":"b61c1f4ebb4d6dba52564280f98381a9663dced4","sha256":"a147846d2fc61f6d31d80e15a7af3343a7620df81206b60af6b6fc5809d9a7eb","sha512":"a500ecfbe977a8f324684e14b9424f10b116c66408a9f0a7712c747d2ac327651f5c68f2305ae971949a821180b10bac4188d307c97b387f948982890c2b3289","ssdeep":"384:nSRO7aWgxkqcClBbRd8B2C12e62VKFPQX3De1foIfG:nSRO7hgxRccHdZCh62VKFoXz+fA","tlshash":"cbb2e7ed7195f4610aa365a4803f410bf2391db6285d90e0e3a2dcf579b4a9ec133f5e","size":24245,"data":"","first_seen":"2026-09-05T10:00:45.645218Z","last_seen":"2026-09-05T10:00:45.645218Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/assets/tailwind.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b5a45086c409471ab24de6db33ac187","sha1":"81a0187717ac9c5c64a1b83ba25abb4686be7811","sha256":"5aa3e131b435c970c2d0087d45e404c4ef874ed780182983f29359f4e70ba82e","sha512":"076c4bd0430899db238b352e14c337354deaea60a51ed9c897f049ecc13c415a166b376e7f9a6bb984352e2a9bdebe70c0e2fcd769c8f6fdb180a5c4e7b250d7","ssdeep":"6144:XXg48+WRYLwpj1dpyJSzuPhU1TsERQB8Tsca2FdBHRXHgJoI9p50Zz:ngl+WRYLwWPpFOVXHgJoID5y","tlshash":"18053d4aaaf724215223b07c1eaf9405b635445f4d88fe583f8c52986f8c42e47f9fad","size":865572,"data":"","first_seen":"2026-09-05T10:00:45.585687Z","last_seen":"2026-09-05T10:00:45.585687Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0i.w~gsdyvawg.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2d87b4212729a5dcdaa53816f2ee954","sha1":"60f3f7bef7326d7f292bc3926c016cae9a51cfba","sha256":"0836950e34d73ea49c3650f8213969ab8da2c1b8ca96d81a82505c3c5895bb64","sha512":"f05076ec6cb7ab679fb4f0a0581bfbcf8c5f0882f2a087d9f5dde0e6eb81e71ddcd0ab78158f779a010baac920aaf10bff119f6f3b1b3a7848a79b968d095104","ssdeep":"1536:256YbZPL4ZOxn0g8NIXw5jVAE5WRIvhHfxgcD7RGsu94dZW9AYvBF:66YVPLLxkIXw5jVA0WRIvhHZgcD7RGTB","tlshash":"f353fae573067878e396415752a7d04cb23f7679240a5528b2bc4cbd3a28c84e3a6fdf","size":62570,"data":"","first_seen":"2026-09-05T10:00:45.564841Z","last_seen":"2026-09-05T10:00:45.564841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0-zbc.~la5t2_.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41c78604a561d706e4fd261fc96803a9","sha1":"c8cf60cd7c43088fb9d3361f569f51c85a433d90","sha256":"4957ca6b5e8ede325d5735dd30b801568a4b8c8470e77f1b1daad260004fd397","sha512":"eddbcb099f2eaa54db755740e940609e2ec0789b0c4a5525b5604213adf4d1e1c0df0659591f56eec7abd52056a45545d14e7219cf9df010e93f5a03be94e37e","ssdeep":"3072:6kAH+20JnFnqvCMxpg8pEDZe0O3w9P6pzfSBCaHsdNtX:6kAH+26nFnkCMxpg8EZXQwRwSBhGtX","tlshash":"034419f7128969715893c747686a3707085daef5f00cc6b4eb7ad873ac5b9cb00637a8","size":262154,"data":"","first_seen":"2026-09-05T10:00:45.598325Z","last_seen":"2026-09-05T10:00:45.598325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0u3i~830mjw4_.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f415069e221b3d91164660923f3f42ba","sha1":"af16d825f202e1a4982b1a9e7d48c02176dfa8d2","sha256":"7b200800a36913f451e8a555283c0646f8efbb7a80fdb0e31077da1bfc6ded77","sha512":"ac37805580a8f9b325722f7ee5b5fd3dd6dc9ad4129429bd13a652333145390ad2a07ca0816137091a27c9f6e42b83380a30eac9019041f027bdc81dcd39a80c","ssdeep":"768:nSxIxFUK34RW+pPfQpLrkOpRwk1VZJqWDV:6IxFUKIZPoNXRp1DJq6V","tlshash":"b6d2189b7660b42103ae10e6f0ab5906f7391617201eb468f1ed96df3f6084988f3f6d","size":29393,"data":"","first_seen":"2026-09-05T10:00:45.625703Z","last_seen":"2026-09-05T10:00:45.625703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0x1pfg--xbw6f.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e45ab4f547e2b55f93db2af913a1c83","sha1":"717f5a885c9109247cf493d6b369d7ab257fb70c","sha256":"a92c4b8d88a41aaba49c79aa8b9a4522dd87bcf74dcf48ff679a1c3414bc2c9e","sha512":"6bbe60898b920b13b7927d6b1988c92fbe062d89dcd4757a189f8a6b4e26aac7e7d8f8f12794f04c1a1c755026fd4062819f94dd1a8aae18a7390abde96b630f","ssdeep":"768:nSjguLhHJNPkOsCH71yZdATNEQ+lmf0m0at3v5aCMOLnKaBtl5N2afBi7FW4xdBM:wlLhHJNPkOsMIMTwiX3v5aCMYJsFW0uv","tlshash":"b903b561a28131260e8353da542903096fbe79b4178c545fb76c4ee72d52cca4bbeff1","size":39510,"data":"","first_seen":"2026-09-05T10:00:45.558129Z","last_seen":"2026-09-05T10:00:45.558129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0zrcl057127ja.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d50af12855b81aad8a3c0b9622acb36","sha1":"73ea8688bf32255af4734b63f6d2eb4d6e06532c","sha256":"c5f04b5a9701e2dd58ae7be0d7545296eb370dc914b1032f5ea1bc84457c1d3f","sha512":"7f3bcfa11160b6c4952e409751ec1918418e36664062f48279adbe60858ff3377264ca4fb631484dbb7d65545f1a690bb951d78a3c9a77052bf54c65abcc375a","ssdeep":"","tlshash":"0f7197263150f94103a9cc88843f021ff1999c77147d74f4e7ed8cf125a58aea2e4f66","size":3822,"data":"","first_seen":"2026-09-05T10:00:45.577353Z","last_seen":"2026-09-05T10:00:45.577353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/02keahw9byutm.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7d9ddeba75c3b9d4d0bdbc1a4450f9c","sha1":"0581a11d9f38bcab2581fe9fbdcee590e3c99114","sha256":"d3f942207e72aa7a3d0b43e68bdab1f042e5294e5bbf428a05aca7797b570e1c","sha512":"af2b66b19cefd18f2a470a4b58bb08c644743d00a533801ca7d091ae21736b7ad0e913ba95ee3879700f9f4494fd7480cf8a1d7ac2cd44d1f956062197c67ab7","ssdeep":"768:nShqcAXQkUd+tbQ6+/urCAssBRazyoMDuUEW2Y+ZXxjTMUbLY9wSQTgW6AU05A:PcWQkUd+tk6+/urhsCwy3DuU6N1TMUbw","tlshash":"7b131a61f6582024326bc06d20d6d71537bdb012930addbcf6ec507c2e96aea6077bf9","size":45000,"data":"","first_seen":"2026-09-05T10:00:45.590571Z","last_seen":"2026-09-05T10:00:45.590571Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0_~xvyz.n3n~m.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99e264c3973ca7f377b18878e205b100","sha1":"c1078e1a215228043851f653ef931f5b7b6ef16b","sha256":"382a9dbc844d42b61a75a7574493606b6ef07b71cbcd46d688e1e8d8162fde6e","sha512":"c23097350fa34d3c76f6f8e448e397757f63794cbfb6e26ee85def6a4f62f6a2cf4daff60e1a25905a83e485846206dbe1f8ff2403dd147482a2d8e74e7cc180","ssdeep":"768:nSBb+ZBpQP1/ZUg/Lpl/v+GMHhmML0JXVyU4i:RZXY1/ZUgq4B","tlshash":"5833c5b172d4faa2139740e5d43f2017f23d0c7120ad7470a3e89cdb754898da6bafa9","size":52484,"data":"","first_seen":"2026-09-05T10:00:45.654997Z","last_seen":"2026-09-05T10:00:45.654997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0o2asms0sa0zx.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba7a75f471e856e4fbac7260d6e6fd9","sha1":"3d2b1622de9db730d8b50e89e6a81dc65d05887c","sha256":"7938801662e6a383bd219a93c7c356b1512ee4552f9dcf82cb8012783571cdf4","sha512":"7b4a3a436fca493b779b952d454ffad9bce78382e972412aa5631dfb8736586b91b323dfe01a10c206403ea39d5441f31255d8130ee7f034f6c0693cd8310fdb","ssdeep":"","tlshash":"ee51b48a8e115514669283c8e22bc124be9b183d734e8775b3bc8f36f218cc6a5733c2","size":2634,"data":"","first_seen":"2026-09-05T10:00:45.583233Z","last_seen":"2026-09-05T10:00:45.583233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0oyf7yeg3ot9a.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4402ff3c84ed3583ca56e91dd44d0311","sha1":"9066a2ad6355703c60988938c18e63218ecad5a4","sha256":"46e4972220db1c4f9cb4fcf7e1751b2f7f4187ae07bb5f26b3b0986c622c8a33","sha512":"b9027f41b7d012b141583e92dfdd4604e139eca844165d5f2773ae1c6d03981eca58dc3132ff00bcf046378aeea084ece5efc60559abb7ed74efc352f19bc1a4","ssdeep":"1536:lwSXj5Xt6VtzOxWMJIGOUC98pvnKzn7kW40DTYW9dSsNzPSOF6am4niTWVyzZQqX:lwSXj5Xt6Vt6Lwzn7kW4gt+IiThz3","tlshash":"8e53b6963756b0150be9128624b94443e2bdaebc421d18acf5ea51dfbb8cc45e3b3f34","size":61708,"data":"","first_seen":"2026-04-24T07:47:43.556685Z","last_seen":"2026-09-05T10:00:45.615948Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0109aos4oaehc.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d5528c730204bfa569d9f7e99b79cae","sha1":"4e3a8a91d6e6d629efad41617f88a20288354ed0","sha256":"82f7d8b276208556509f0c4200e906907de8319b0398816fb3951122c76fab15","sha512":"7f6723587a6d96f890d3ea3ea22698fd4f3552d5be7c901e2ebe77147238f3b1d9c403ea5b2d9b83cf8948c527a685cb5dba30f8ee5e406b51ffc492ef940b34","ssdeep":"384:nSGFGMOocOYoFmQuEoFf8IMQgtvxyTCtvUyUm0uCS53h9tXdjzGr/l8N1W:nSBowyQO1UY0uCS53Duz0W","tlshash":"7292c72a655b847e69ffe3a2e16cef9586281507c11d0bbcf6d74f329b04f95818cb08","size":20838,"data":"","first_seen":"2026-09-05T10:00:45.588243Z","last_seen":"2026-09-05T10:00:45.588243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/00rowka-ndjgd.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e0969b5067e348d9ee88e1f68c133e6","sha1":"24fc291622f695a9110a32f34d7e396c21880dac","sha256":"f7c99d92243d002c52e9770a76c30d0448ea1ad178de27e587274afe29920dbe","sha512":"d8f16b4576a625ef22a5be85b002187c583d3085f875aaeff6ddc29704e41af325913ba76aac23ce5bc336ac75cb004dbeebe21b46fb3c57f9abe00325bc0448","ssdeep":"1536:97AawR0c5+YGUgRVPVj0cnADjhlmFBp7FKxIptM6r5N0s56AxcJvw8K:ZLUqjq0PFGKr5N0Q6UcZK","tlshash":"a8934be9335a347e83d911da98ba4114f77f99b9210e041cf26898bb3c31885a1f7f76","size":95598,"data":"","first_seen":"2026-09-05T10:00:45.593679Z","last_seen":"2026-09-05T10:00:45.593679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/14qls_x4suxmf.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe1e592cd32f681b45aca45fe872e401","sha1":"554efb3cac033d75c78947ef08e7176dc79633b0","sha256":"dc661553ab73dcfc81bdff8a4c1121b9b4b10a9fb00a5e7db23cb098c806ac4b","sha512":"960cdef9ccd9ac8c9669a085ab245063398d4a161cdb39a9dc852433493b231c90cb5e014ba2b3490f385f2af7b15f85fb0fcfebffa14e26f5557b658531a461","ssdeep":"3072:3X2tu+Tz5Jx2QFpqAlZUoZXvLoTudlkTcg2rJ/a:3X2tu+TF3XFplfLoCdiZgJ/a","tlshash":"5d1408ec3d99e261aeb312a700df28037378662b240d4d60a214fd9d757845bb16bfde","size":203729,"data":"","first_seen":"2026-09-05T10:00:45.579279Z","last_seen":"2026-09-05T10:00:45.579279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0f6ey.z65465x.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"137bf62f00f10d69185845e87cd875f6","sha1":"91000304791ba0a0b7ed69f0b6d82088c5d74343","sha256":"7f009aae3ebe66e7d227e4033224ed44e2b446ef1bdbb2d2c9894753ec058840","sha512":"b89521426afa17346354d16ffc9ee626a67fb989be132ab2621fbf2c11ed9edb3c1089ace4201d87cc8187d8b208862b2e5e7dd7e355ac155eae9bd954518f8a","ssdeep":"768:nSIDtBoZ1lO6nLE+qZZrZJoO1FIcv5Ywv7bYuAsCwSYarI9hTzn3g:OMYE+qZ9ThvCyXA5wF9hTDw","tlshash":"a1332b21dc02256c2c63a38e7e82e15894e02617c9bee351ded9cb2f01f579d56cdbe8","size":51190,"data":"","first_seen":"2026-09-05T10:00:45.573574Z","last_seen":"2026-09-05T10:00:45.573574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd1d366b98ae51b99bbdbe9d69fe2f49","sha1":"70cd10f1c7fdd6e1b9f45d44697467ed8b0e39ae","sha256":"8ff89f1773ced8b1277d085ee41eadb1837cd95bd22c4b19570528d7a53b4d48","sha512":"6fc69624de4396fb5630d302cdc96bafd2047b82d52d95494e225bf4c259449e810980c290b57b923dd1a171306f27e0755549086224612e22f33164d37dcfb4","ssdeep":"","tlshash":"95f08c9e68e768b2c027b0ba4b5f710d703755232018da81be0d86146f6846ad2d5ae8","size":595,"data":"","first_seen":"2026-09-05T10:00:45.67549Z","last_seen":"2026-09-05T10:00:45.67549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a8bd3357d6b2acc301d5a15c5611f6","sha1":"d9266789c34ff34f31a5c6d70dbacc4ba6004c62","sha256":"8d6b9a38da1913559fcd447b51124c3039f3a51df55e1836216613f89e6919d9","sha512":"326c31e6f52747c1266bc80dcfbec0e47364caf3b5af151bec2219e5c53c8d5b7b0eef9283a978b99c59d6695233179ef80426dd93c56c97a87e357b79338d83","ssdeep":"","tlshash":"03b0924e85a8a122183170224d5a021a214b424381cc508177ee17000fd792461668a1","size":115,"data":"","first_seen":"2026-09-05T10:00:45.677041Z","last_seen":"2026-09-05T10:00:45.677041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/163lkq8b7bmbf.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"049cbb5485eefcb4f316292a45dd9343","sha1":"66cc3b1a7f92f79e4c45e1c96f6979c4304be982","sha256":"c1129cfc0f4828f5f733aa055b27f834272dce0dca5d6b30870a0a5a707c5860","sha512":"ec6eb253246b679e94c36fd42a6969a3c175c390f9993c1a8f6e1cb435f7b5d3d860f3656ad8ebe7ad5b3da55560bc0671973ae4fd78d7b13df338343af58303","ssdeep":"768:nSPH2mRcdkiyLnbcRwij6W7FOPDXOR9PG1c78IOFVLq:I2mdGDDwPDXOR9+eoRq","tlshash":"6ae25c2637c03b3e139b01a1b95f9542f7380322625fa05df1eed5e82f589458a73bad","size":33750,"data":"","first_seen":"2026-09-05T10:00:45.652742Z","last_seen":"2026-09-05T10:00:45.652742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/17hez4krv1-77.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63bcc5d18e7c1be6f86c4621d036077f","sha1":"f6f8dbb11e7abce2f08def081fd1d9afcf3884ba","sha256":"b2b693d29c51a48f023b848dc36df23185dcd2ec5b4c0043cddd47fdb1a75b85","sha512":"65a73cf7e00e556a4f574ce895a0cc373880e7cb6635bda4eb4c64d189f0a1503a9895c565ef3d745c5174192bd6b156103a20ada070277111f99bbe1b5772e4","ssdeep":"3072:f/KZq2xO5+WfWeOdLR3PSKGaURXUzGmfm:f/KZq2k5+WfWeOd9/SKGDR+m","tlshash":"eed32bb67242b479e79f426a8057401db33a65a4200e4838b27c8cdd2875d9992f7fff","size":130075,"data":"","first_seen":"2026-09-05T10:00:45.561781Z","last_seen":"2026-09-05T10:00:45.561781Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/15hnrqt0stqff.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1debc50a587a3c024caceed7dba52c4c","sha1":"5f21d9b579891b73ecccf1ea71a239b61d70dd30","sha256":"e5da89a0ee45dc17470aa5bf1e2542cd0b11790f6756445853f587a5d0464357","sha512":"bb9ca129ebc82da4b6ca1c22cd16794ba0ce34855e12b6c5e12ee52805751880663dc6867d24997b0275457e13da2d2f09f2d5faa9aafa76e31ab3d169b94fc9","ssdeep":"96:nv/Sz2ukB/8ys5sAdAMCRGwouWx7R6ulzw7+KiMb8DXC84:nnSzV/yseAdA5poZx7RRzwKKiJXP4","tlshash":"b791628e2740255d095d02a1d0f25d871770822600bdb0add1ee80ae34aeb8d5fff776","size":4243,"data":"","first_seen":"2026-09-05T10:00:45.623522Z","last_seen":"2026-09-05T10:00:45.623522Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/10.8b-ruemk7m.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"919b9a830f93d4ffc32764945a718cf8","sha1":"1a48e4198475c99b933ed8c2e2c6540e56eb3827","sha256":"9fadddaac0835ab16dc1d1b4530e33b686007dd049eaa91d82e94fd4b0f9cf0c","sha512":"446b75fc646beb1e2aa81dcce685f25e169570d112a737dbd9740819617bbbacc55b81b1c0adbbd9fd8278f4e50fb3b7d27c7c9bd161188f18d6e41bb0cf450b","ssdeep":"768:nSBU6K9OKIE68sEoNtIX5MffjQn8q+ZsXH:AfXNMD+mXH","tlshash":"d933c6b53291fab602db91d9d0370012f2790c7120ad64b4b394dcaf399dd8992fbf69","size":52603,"data":"","first_seen":"2026-09-05T10:00:45.648648Z","last_seen":"2026-09-05T10:00:45.648648Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0gyq7xg1hca~~.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fbfd65680aae2e91bb2c677ba60c624","sha1":"4c8a0d823d4ee97378bcbe04a6107ee46a4a628a","sha256":"6116b8cfae667a8fa503a0fec2ba3a1471f68ca4fba9007139cbb76c96e2e22a","sha512":"82ec8cdec8276c8cae08490436483e095c930e6e65e286fd06085730c197892d8c2939698076b33994d1031b6c60817bc900eb5abe553ff9246f57426228cf9c","ssdeep":"6144:xgFhjk2yH+golEsDlgNAcwg5dsHYAzeuN46X:QDlvcwg5d2zDX","tlshash":"fd1419f63392b46343eb4298903b0001f3798da5205e9469f3a9ddde395494ee1f6f3a","size":206010,"data":"","first_seen":"2026-09-05T10:00:45.581097Z","last_seen":"2026-09-05T10:00:45.581097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/097idasj_f99h.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"536bc2fe20c92ab788a785b64fab9ad6","sha1":"2bf6553c9d3b09b356c7c1269bd080ef7f784239","sha256":"1f9e6fab610d575f78ab1e2ed2679457a507514255ae99d984a788fcc955a3ae","sha512":"b7d9eb799c5185f59d2171b401d8a20ee6c109252789c9143dbd5ff8611988900b5e85365220ac6eb126f0eb0243901bd45082aa429351ff5bd90cceacf20a32","ssdeep":"6144:1OAtyKaZgu5BaeG8EEtPP09DpOajvYbzDSum:gy9eaZvEtPM9D/jAM","tlshash":"2e945c9d7982786d539b8255806f0006e2bd690a300e483cf570d9efb876ed960bbff5","size":408162,"data":"","first_seen":"2026-09-05T10:00:45.619972Z","last_seen":"2026-09-05T10:00:45.619972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0c8k.gc7snz~g.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64f17237f436bd071511ed09fe7a240c","sha1":"e1eca7e6728c86cc1f16d049e3f31b833bd9421d","sha256":"07698002f9d95fd6e3d8250279a6921117ba4ef98d2a0ed48b9f2cb7faf035e6","sha512":"d905bf74c9bd59dcde9300d1543e06a4cb977b05316fc9ec3eaf451224851be8abfd09c79e46880f0054b3c86739b76703a710ec050eadc073ee7818fc2c4106","ssdeep":"12288:ZBIqB8/2qVltQgA3lJ0EISK+gPizKr8oOmPaCIgVYsoIuWagtV5:3h8xelJ0EISK+ro5aCZJagtV5","tlshash":"d7253aa673517036d3df519a90ab4004b33a6955680e402cf27cacef29e5548a3fff7a","size":971798,"data":"","first_seen":"2026-09-05T10:00:45.627605Z","last_seen":"2026-09-05T10:00:45.627605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9041c21e5f4b844e808f4ff9d6e2481","sha1":"642ee66c72b56a85cb37767719db37f9a0956915","sha256":"c8cbd67f347b60ae68dc5fe9fc51b4e0e5e16c94fa09b8a363f7b2d3d17c3f3a","sha512":"725a2143849040c5b0b5f71c28371be18a51e762aa9d0633d9d986db894bba55b3ed2926b0886543a78e69fe519ab3700f66003f60abed68a214f3b181aed153","ssdeep":"","tlshash":"bd21112d29690579988e4324ea873e019ffe022731486c5cf8c88b4476ef5df5652b03","size":1212,"data":"","first_seen":"2026-09-05T10:00:45.650949Z","last_seen":"2026-09-05T10:00:45.650949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ga.jspm.io/npm:es-module-shims@2.6.2/dist/es-module-shims.js","fqdn":"ga.jspm.io","domain":"jspm.io","tld":"io"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8f292f54e5a763fe799ed5e67269c86","sha1":"772bcc0f728c51fbe937e468d776c95e2fc94206","sha256":"1ce44f8a98b7b9f6083cadbfc44a0e0d94b868903f13cf609dc239a42cc81024","sha512":"82376dfef7cd9b9b0a2a6065be31fa2a0ea6b19073131347e074380bda3c2cfa1bda11eebf830d438da54806fbe1c670f9f6d74f2f9ba3641c1a86572d44eb1f","ssdeep":"768:FbxyJAdDoykNTEdTW1HnXp73nz03qdDHH0MTDHDzadb06dnf9kYGeUtCk9PwzBnq:OXIhceE6xirLR6j0NcHrzIxpl","tlshash":"4a13f95630fea033c7c11ae3407b625b99144d58fe089939b728fa5798a76d38c23fe5","size":41837,"data":"","first_seen":"2025-11-22T20:35:46.015979Z","last_seen":"2026-09-05T10:00:45.602977Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0j0.g9e.c1i_1.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc54b72358641c9cdd4887fc0e844f5e","sha1":"1c1e6b7083970d75875623ecb74fedc1b26eec76","sha256":"751ad6712a3d50c6adaa6d657dd73e173b64b321d9c1465dd21d78cea7fbb853","sha512":"14d0c220913f71a200518319864144019f30fff9ac6ab706e2bda80f9e9f087d5ad56aa1c93717512d5c4d2ef2722f2dcb3dcfcba1e1e5dc2eb75f919a277d07","ssdeep":"3072:fuR3ZsdfXeZKGlKnkNu1qYHCFH+AofFopYz0YI26wwMU5+DYZpWKw9PdHF9Ku:fLo8U5+DcZwxdHF0u","tlshash":"b2a33a107a8727f8d3aad442618b80d8915fd671a64b1914f0ffe13e1ed0865b38bebd","size":107315,"data":"","first_seen":"2026-09-05T10:00:45.608628Z","last_seen":"2026-09-05T10:00:45.608628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0xab7rbkvbrtq.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4a577129ed530a8b6c09792c8668659","sha1":"9f5336438ad69d716d450b1b1f0e672d0632eb10","sha256":"02f2969c66d712d557459b98acea78aa32d6943897078095dfa3c8f06218790f","sha512":"7573deae8a2a8610eaefdb174db01b94f608439603a254f1c5950c86d6c5bf133ec529ce00ae279cb1cafea26fe74be88eacb01d1fc4f4cabea4344fa9f7c5f5","ssdeep":"1536:MmVbvvSnpvDJSUHvkiD5amstN84idkxdl4TA6HxHVJNcGaoI9/zhbOjlTRL:UpMMQmYwSd4RLbL","tlshash":"3bf3208b4399e8138e71fa94e97fe7e743144db1a5238962d10d2eb9ca4b471c7bc01e","size":168977,"data":"","first_seen":"2026-09-05T10:00:45.607015Z","last_seen":"2026-09-05T10:00:45.607015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.364.6","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10c4163f08efe5aae00420dc1b9537b8","sha1":"7f0f472a66befa575f3871c95775cedc1ebaf4b6","sha256":"eb4b20d53b36120d77bc9e853173572d13d1cd8dd959ee085b407cef837948a3","sha512":"cde1429d2d1a5b8e42bd159bd61d14beef4ebc4c58012c7073e8cae0eaae16236be3f2eb370decb5958df1916fcc2f1f7e5c600caed87775e9ffd9f8366aa60c","ssdeep":"1536:H9LuXgsAu2aE4BHDVYknZbaBA5d0WBlwaXd+y:HVuwsAobhDVIRAlwdy","tlshash":"b3a35dd5ba41e16d51eb80b410be5843f33d2b0aea0d8c54b1139cd83dd6989a39ffb6","size":102477,"data":"","first_seen":"2026-09-04T10:28:35.956932Z","last_seen":"2026-09-05T11:38:26.359389Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0kb7b2qyedezr.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85efa8c2b4afa77a7a4c0c5292695f9f","sha1":"eba3e80e02fca93016382622f2e7013482efb9d2","sha256":"015a96fdb131d6404bfeb78312df17fae6f74117aa473c86adab68f647a094e0","sha512":"ead19b05299066dd659994e8a4f3ec5f1fa364c57e5f9c94669a36d92dc5646ce04904a27c5594e3edc190f0df62ae35d65d82df84f53ede42aef50cdbafdf06","ssdeep":"","tlshash":"a751d48a8e215408768282c8d23b8028be9b143d374e977577bc8e35b219cca24773c2","size":2685,"data":"","first_seen":"2026-09-05T10:00:45.624774Z","last_seen":"2026-09-05T10:00:45.624774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d47194a722f8688401039e24611d8533","sha1":"4dc588d01ccfa887f904a0436f89094048e27309","sha256":"a732637fe92e0cefb9fb95ab5e7fe56551312b02f1645ab1c01b1d32213bd781","sha512":"ec906a1a784c163dc0f632c38a13440c6a34108b037e20add982b4a75b831cc23c501f7eb6f6a842c6fc2e5df78bd37ccdbfac3cf0f9afbeeaf230f6143decb4","ssdeep":"","tlshash":"3801d64fc69e3cba2c3711549bee10693b972153eac6c8013d7cd648bfa0496e352799","size":850,"data":"","first_seen":"2026-09-05T10:00:45.678839Z","last_seen":"2026-09-05T10:00:45.678839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Loading es-module-shims polyfill","filename":"https://faces.site/_next/static/chunks/0gyq7xg1hca~~.js","line_number":10,"column_number":288}]},"http":[{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0x1pfg--xbw6f.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.092Z","timestamp":1788602391092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0x1pfg--xbw6f.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0x1pfg--xbw6f.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"3e45ab4f547e2b55f93db2af913a1c83\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0x1pfg--xbw6f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nrnsk-1788602391095-8282c9e188d0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":39510,"size_decoded":13657,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30185)","md5":"3e45ab4f547e2b55f93db2af913a1c83","sha1":"717f5a885c9109247cf493d6b369d7ab257fb70c","sha256":"a92c4b8d88a41aaba49c79aa8b9a4522dd87bcf74dcf48ff679a1c3414bc2c9e","sha512":"6bbe60898b920b13b7927d6b1988c92fbe062d89dcd4757a189f8a6b4e26aac7e7d8f8f12794f04c1a1c755026fd4062819f94dd1a8aae18a7390abde96b630f","ssdeep":"768:nSjguLhHJNPkOsCH71yZdATNEQ+lmf0m0at3v5aCMOLnKaBtl5N2afBi7FW4xdBM:wlLhHJNPkOsMIMTwiX3v5aCMYJsFW0uv","tlshash":"b903b561a28131260e8353da542903096fbe79b4178c545fb76c4ee72d52cca4bbeff1","first_seen":"2026-09-05T10:00:45.558129Z","last_seen":"2026-09-05T10:00:45.558129Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/17hez4krv1-77.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.628Z","timestamp":1788602391628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/17hez4krv1-77.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"17hez4krv1-77.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"63bcc5d18e7c1be6f86c4621d036077f\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/17hez4krv1-77.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wvzrd-1788602391632-d41629e40329\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":130075,"size_decoded":44767,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"63bcc5d18e7c1be6f86c4621d036077f","sha1":"f6f8dbb11e7abce2f08def081fd1d9afcf3884ba","sha256":"b2b693d29c51a48f023b848dc36df23185dcd2ec5b4c0043cddd47fdb1a75b85","sha512":"65a73cf7e00e556a4f574ce895a0cc373880e7cb6635bda4eb4c64d189f0a1503a9895c565ef3d745c5174192bd6b156103a20ada070277111f99bbe1b5772e4","ssdeep":"3072:f/KZq2xO5+WfWeOdLR3PSKGaURXUzGmfm:f/KZq2k5+WfWeOd9/SKGDR+m","tlshash":"eed32bb67242b479e79f426a8057401db33a65a4200e4838b27c8cdd2875d9992f7fff","first_seen":"2026-09-05T10:00:45.561781Z","last_seen":"2026-09-05T10:00:45.561781Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0i.w~gsdyvawg.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.631Z","timestamp":1788602391631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0i.w~gsdyvawg.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0i.w~gsdyvawg.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"f2d87b4212729a5dcdaa53816f2ee954\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0i.w~gsdyvawg.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pghc4-1788602391634-f42c2db2d958\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":62570,"size_decoded":20497,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62235)","md5":"f2d87b4212729a5dcdaa53816f2ee954","sha1":"60f3f7bef7326d7f292bc3926c016cae9a51cfba","sha256":"0836950e34d73ea49c3650f8213969ab8da2c1b8ca96d81a82505c3c5895bb64","sha512":"f05076ec6cb7ab679fb4f0a0581bfbcf8c5f0882f2a087d9f5dde0e6eb81e71ddcd0ab78158f779a010baac920aaf10bff119f6f3b1b3a7848a79b968d095104","ssdeep":"1536:256YbZPL4ZOxn0g8NIXw5jVAE5WRIvhHfxgcD7RGsu94dZW9AYvBF:66YVPLLxkIXw5jVA0WRIvhHZgcD7RGTB","tlshash":"f353fae573067878e396415752a7d04cb23f7679240a5528b2bc4cbd3a28c84e3a6fdf","first_seen":"2026-09-05T10:00:45.564841Z","last_seen":"2026-09-05T10:00:45.564841Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026ip=0\u0026_=1788602392161\u0026ver=1.364.6\u0026compression=base64","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"3.41.202.174","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faces.site/","date":"2026-09-05T09:59:52.165Z","timestamp":1788602392165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /flags/?v=2\u0026ip=0\u0026_=1788602392161\u0026ver=1.364.6\u0026compression=base64 HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nReferer: https://faces.site/\r\nContent-Length: 293\r\nOrigin: https://faces.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":293,"data":"data=eyJ0b2tlbiI6InBoY19WaENiaDhIUG56ODhtRlJRTktEYjFXMVFNanlVVUx4R014ZkRyZ01nS0JjIiwiZGlzdGluY3RfaWQiOiIwMWEwNzEwMi05YzMyLTczODktODljYS1mNDQxNjY2YjVmNmQiLCJncm91cHMiOnt9LCJwZXJzb25fcHJvcGVydGllcyI6e30sInRpbWV6b25lIjoiVVRDIiwiJGRldmljZV9pZCI6IjAxYTA3MTAyLTljMzItNzM4OS04OWNhLWY0NDE2NjZiNWY2ZCJ9"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:52 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://faces.site\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-posthog-rate-limit-warning\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":706,"size_decoded":814,"mime_type":"application/json","magic":"JSON text data","md5":"398d0783734ad36b41ef1efa69004da0","sha1":"bee4680ea89d9b35d42cddfd03a37c236fd9087c","sha256":"0905f94aef48467a2fc129d9b8483fb6407667923a8cb1feb30aef7a506aec35","sha512":"a388824c99678d71748ab38af3d60665bc695e98f7891e17d06f71d0440edec52013604ae9b4e18378d87aa615be10cd2fb656dfe5dc131ed31ed46ccec8d111","ssdeep":"","tlshash":"c8019c2d6d10f97e3b4d93608dacff6507bf236629410c508a874d3413852f82265899","first_seen":"2026-09-05T10:00:45.568146Z","last_seen":"2026-09-05T10:00:45.568146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":3,"connect":97,"send":0,"wait":100,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/03lns.2s6aln5.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.085Z","timestamp":1788602391085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/03lns.2s6aln5.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"03lns.2s6aln5.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"aa2361e4b9f739cacadae550a31252fe\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/03lns.2s6aln5.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pk5rs-1788602391088-6daeced591e7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":53055,"size_decoded":20193,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36030)","md5":"aa2361e4b9f739cacadae550a31252fe","sha1":"a07d64b80df3161e2511f169b658f0974bf5753f","sha256":"b99bc78964d2181a5a54272336746334a8ec9777ddd9786a8210b0aea3da7927","sha512":"dfb02ad30de318b0ddce91f18d62480a66723d7f680fdda7b6bd0031c04ad8dc1abb4a30323df865a82f6d3cc7f8720086d100042927206acbd2823103d97a27","ssdeep":"1536:1tqsyfoBmFXzd1O/OxVoba9mR4AUD45kBt348:/qsSF8A9g35A","tlshash":"0a33c8f5b3967132479b1225903a1107f7ba4d90104b8528fa68c9de3ae944ef2f2f7d","first_seen":"2026-09-05T10:00:45.570506Z","last_seen":"2026-09-05T10:00:45.570506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0f6ey.z65465x.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.093Z","timestamp":1788602391093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0f6ey.z65465x.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0f6ey.z65465x.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"137bf62f00f10d69185845e87cd875f6\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0f6ey.z65465x.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pk5rs-1788602391096-b220a1754372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":51190,"size_decoded":16921,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46635)","md5":"137bf62f00f10d69185845e87cd875f6","sha1":"91000304791ba0a0b7ed69f0b6d82088c5d74343","sha256":"7f009aae3ebe66e7d227e4033224ed44e2b446ef1bdbb2d2c9894753ec058840","sha512":"b89521426afa17346354d16ffc9ee626a67fb989be132ab2621fbf2c11ed9edb3c1089ace4201d87cc8187d8b208862b2e5e7dd7e355ac155eae9bd954518f8a","ssdeep":"768:nSIDtBoZ1lO6nLE+qZZrZJoO1FIcv5Ywv7bYuAsCwSYarI9hTzn3g:OMYE+qZ9ThvCyXA5wF9hTDw","tlshash":"a1332b21dc02256c2c63a38e7e82e15894e02617c9bee351ded9cb2f01f579d56cdbe8","first_seen":"2026-09-05T10:00:45.573574Z","last_seen":"2026-09-05T10:00:45.573574Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0zrcl057127ja.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.101Z","timestamp":1788602391101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0zrcl057127ja.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0zrcl057127ja.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"6d50af12855b81aad8a3c0b9622acb36\"\r\nlast-modified: Sat, 05 Sep 2026 09:59:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0zrcl057127ja.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::pk5rs-1788602391104-c6ca58fe1e27\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3822,"size_decoded":2677,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3487)","md5":"6d50af12855b81aad8a3c0b9622acb36","sha1":"73ea8688bf32255af4734b63f6d2eb4d6e06532c","sha256":"c5f04b5a9701e2dd58ae7be0d7545296eb370dc914b1032f5ea1bc84457c1d3f","sha512":"7f3bcfa11160b6c4952e409751ec1918418e36664062f48279adbe60858ff3377264ca4fb631484dbb7d65545f1a690bb951d78a3c9a77052bf54c65abcc375a","ssdeep":"","tlshash":"0f7197263150f94103a9cc88843f021ff1999c77147d74f4e7ed8cf125a58aea2e4f66","first_seen":"2026-09-05T10:00:45.577353Z","last_seen":"2026-09-05T10:00:45.577353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/14qls_x4suxmf.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.080Z","timestamp":1788602391080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/14qls_x4suxmf.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"14qls_x4suxmf.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"fe1e592cd32f681b45aca45fe872e401\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/14qls_x4suxmf.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h2tns-1788602391083-025cdf5f59f8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":203729,"size_decoded":66541,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"fe1e592cd32f681b45aca45fe872e401","sha1":"554efb3cac033d75c78947ef08e7176dc79633b0","sha256":"dc661553ab73dcfc81bdff8a4c1121b9b4b10a9fb00a5e7db23cb098c806ac4b","sha512":"960cdef9ccd9ac8c9669a085ab245063398d4a161cdb39a9dc852433493b231c90cb5e014ba2b3490f385f2af7b15f85fb0fcfebffa14e26f5557b658531a461","ssdeep":"3072:3X2tu+Tz5Jx2QFpqAlZUoZXvLoTudlkTcg2rJ/a:3X2tu+TF3XFplfLoCdiZgJ/a","tlshash":"5d1408ec3d99e261aeb312a700df28037378662b240d4d60a214fd9d757845bb16bfde","first_seen":"2026-09-05T10:00:45.579279Z","last_seen":"2026-09-05T10:00:45.579279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0gyq7xg1hca~~.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.084Z","timestamp":1788602391084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0gyq7xg1hca~~.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0gyq7xg1hca~~.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"6fbfd65680aae2e91bb2c677ba60c624\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0gyq7xg1hca~~.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7hhcm-1788602391087-34890866fa95\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":206010,"size_decoded":67047,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644)","md5":"6fbfd65680aae2e91bb2c677ba60c624","sha1":"4c8a0d823d4ee97378bcbe04a6107ee46a4a628a","sha256":"6116b8cfae667a8fa503a0fec2ba3a1471f68ca4fba9007139cbb76c96e2e22a","sha512":"82ec8cdec8276c8cae08490436483e095c930e6e65e286fd06085730c197892d8c2939698076b33994d1031b6c60817bc900eb5abe553ff9246f57426228cf9c","ssdeep":"6144:xgFhjk2yH+golEsDlgNAcwg5dsHYAzeuN46X:QDlvcwg5d2zDX","tlshash":"fd1419f63392b46343eb4298903b0001f3798da5205e9469f3a9ddde395494ee1f6f3a","first_seen":"2026-09-05T10:00:45.581097Z","last_seen":"2026-09-05T10:00:45.581097Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0o2asms0sa0zx.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.097Z","timestamp":1788602391097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0o2asms0sa0zx.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0o2asms0sa0zx.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"2ba7a75f471e856e4fbac7260d6e6fd9\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0o2asms0sa0zx.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sf5wk-1788602391101-befb4388cca4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2634,"size_decoded":2394,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2299)","md5":"2ba7a75f471e856e4fbac7260d6e6fd9","sha1":"3d2b1622de9db730d8b50e89e6a81dc65d05887c","sha256":"7938801662e6a383bd219a93c7c356b1512ee4552f9dcf82cb8012783571cdf4","sha512":"7b4a3a436fca493b779b952d454ffad9bce78382e972412aa5631dfb8736586b91b323dfe01a10c206403ea39d5441f31255d8130ee7f034f6c0693cd8310fdb","ssdeep":"","tlshash":"ee51b48a8e115514669283c8e22bc124be9b183d734e8775b3bc8f36f218cc6a5733c2","first_seen":"2026-09-05T10:00:45.583233Z","last_seen":"2026-09-05T10:00:45.583233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/assets/tailwind.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.102Z","timestamp":1788602391102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /assets/tailwind.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public, max-age=3600, stale-while-revalidate=86400\r\ncontent-disposition: inline; filename=\"tailwind.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"2b5a45086c409471ab24de6db33ac187\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /assets/tailwind.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::57sxv-1788602391107-ba3326412ff8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":865572,"size_decoded":173213,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2b5a45086c409471ab24de6db33ac187","sha1":"81a0187717ac9c5c64a1b83ba25abb4686be7811","sha256":"5aa3e131b435c970c2d0087d45e404c4ef874ed780182983f29359f4e70ba82e","sha512":"076c4bd0430899db238b352e14c337354deaea60a51ed9c897f049ecc13c415a166b376e7f9a6bb984352e2a9bdebe70c0e2fcd769c8f6fdb180a5c4e7b250d7","ssdeep":"6144:XXg48+WRYLwpj1dpyJSzuPhU1TsERQB8Tsca2FdBHRXHgJoI9p50Zz:ngl+WRYLwWPpFOVXHgJoID5y","tlshash":"18053d4aaaf724215223b07c1eaf9405b635445f4d88fe583f8c52986f8c42e47f9fad","first_seen":"2026-09-05T10:00:45.585687Z","last_seen":"2026-09-05T10:00:45.585687Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0109aos4oaehc.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.620Z","timestamp":1788602391620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0109aos4oaehc.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0109aos4oaehc.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"3d5528c730204bfa569d9f7e99b79cae\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0109aos4oaehc.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wvzrd-1788602391625-b0b86aa2e319\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20838,"size_decoded":8317,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20503)","md5":"3d5528c730204bfa569d9f7e99b79cae","sha1":"4e3a8a91d6e6d629efad41617f88a20288354ed0","sha256":"82f7d8b276208556509f0c4200e906907de8319b0398816fb3951122c76fab15","sha512":"7f6723587a6d96f890d3ea3ea22698fd4f3552d5be7c901e2ebe77147238f3b1d9c403ea5b2d9b83cf8948c527a685cb5dba30f8ee5e406b51ffc492ef940b34","ssdeep":"384:nSGFGMOocOYoFmQuEoFf8IMQgtvxyTCtvUyUm0uCS53h9tXdjzGr/l8N1W:nSBowyQO1UY0uCS53Duz0W","tlshash":"7292c72a655b847e69ffe3a2e16cef9586281507c11d0bbcf6d74f329b04f95818cb08","first_seen":"2026-09-05T10:00:45.588243Z","last_seen":"2026-09-05T10:00:45.588243Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/02keahw9byutm.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.615Z","timestamp":1788602391615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/02keahw9byutm.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"02keahw9byutm.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"e7d9ddeba75c3b9d4d0bdbc1a4450f9c\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/02keahw9byutm.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krrpx-1788602391619-22ea0be4e0aa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45000,"size_decoded":13620,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13704)","md5":"e7d9ddeba75c3b9d4d0bdbc1a4450f9c","sha1":"0581a11d9f38bcab2581fe9fbdcee590e3c99114","sha256":"d3f942207e72aa7a3d0b43e68bdab1f042e5294e5bbf428a05aca7797b570e1c","sha512":"af2b66b19cefd18f2a470a4b58bb08c644743d00a533801ca7d091ae21736b7ad0e913ba95ee3879700f9f4494fd7480cf8a1d7ac2cd44d1f956062197c67ab7","ssdeep":"768:nShqcAXQkUd+tbQ6+/urCAssBRazyoMDuUEW2Y+ZXxjTMUbLY9wSQTgW6AU05A:PcWQkUd+tk6+/urhsCwy3DuU6N1TMUbw","tlshash":"7b131a61f6582024326bc06d20d6d71537bdb012930addbcf6ec507c2e96aea6077bf9","first_seen":"2026-09-05T10:00:45.590571Z","last_seen":"2026-09-05T10:00:45.590571Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/00rowka-ndjgd.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.623Z","timestamp":1788602391623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/00rowka-ndjgd.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"00rowka-ndjgd.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"8e0969b5067e348d9ee88e1f68c133e6\"\r\nlast-modified: Sat, 05 Sep 2026 09:59:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/00rowka-ndjgd.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::mqb5w-1788602391626-9e137a177232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95598,"size_decoded":34807,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25807)","md5":"8e0969b5067e348d9ee88e1f68c133e6","sha1":"24fc291622f695a9110a32f34d7e396c21880dac","sha256":"f7c99d92243d002c52e9770a76c30d0448ea1ad178de27e587274afe29920dbe","sha512":"d8f16b4576a625ef22a5be85b002187c583d3085f875aaeff6ddc29704e41af325913ba76aac23ce5bc336ac75cb004dbeebe21b46fb3c57f9abe00325bc0448","ssdeep":"1536:97AawR0c5+YGUgRVPVj0cnADjhlmFBp7FKxIptM6r5N0s56AxcJvw8K:ZLUqjq0PFGKr5N0Q6UcZK","tlshash":"a8934be9335a347e83d911da98ba4114f77f99b9210e041cf26898bb3c31885a1f7f76","first_seen":"2026-09-05T10:00:45.593679Z","last_seen":"2026-09-05T10:00:45.593679Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0-zbc.~la5t2_.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.624Z","timestamp":1788602391624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0-zbc.~la5t2_.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0-zbc.~la5t2_.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"d81ab1f75fe992ca0e10760d926af59e\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0-zbc.~la5t2_.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krrpx-1788602391628-4a3e93cbc4c6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":262159,"size_decoded":78838,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65212)","md5":"41c78604a561d706e4fd261fc96803a9","sha1":"c8cf60cd7c43088fb9d3361f569f51c85a433d90","sha256":"4957ca6b5e8ede325d5735dd30b801568a4b8c8470e77f1b1daad260004fd397","sha512":"eddbcb099f2eaa54db755740e940609e2ec0789b0c4a5525b5604213adf4d1e1c0df0659591f56eec7abd52056a45545d14e7219cf9df010e93f5a03be94e37e","ssdeep":"3072:6kAH+20JnFnqvCMxpg8pEDZe0O3w9P6pzfSBCaHsdNtX:6kAH+26nFnkCMxpg8EZXQwRwSBhGtX","tlshash":"034419f7128969715893c747686a3707085daef5f00cc6b4eb7ad873ac5b9cb00637a8","first_seen":"2026-09-05T10:00:45.598325Z","last_seen":"2026-09-05T10:00:45.598325Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/166qjl-zb4y_v.css","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.639Z","timestamp":1788602391639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/166qjl-zb4y_v.css HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"166qjl-zb4y_v.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"00becc41f7660f2f858341092648ff61\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/166qjl-zb4y_v.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krrpx-1788602391642-9e559444028d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2307,"size_decoded":1909,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2030)","md5":"00becc41f7660f2f858341092648ff61","sha1":"6795c36e7dbe9a6a5e28e1ca68740417a5658353","sha256":"884a747a8a67415112aa1490cc6c4fe7f9c9b8734b58edec7c5a87bf102ded7d","sha512":"844a9f8924a974886bb3d47b126454d5d456d7b01c6a88c7fa04463c04b3fede61ca8fc16842cf6eb82312b4154d36d4fef1c12ed5d69eda70eade6fc6968ccc","ssdeep":"","tlshash":"f341e124611fd909c1a3ce5235cd6e432c19583107e66723dd2d2e689def83b63e2b68","first_seen":"2026-09-05T10:00:45.601043Z","last_seen":"2026-09-05T10:00:45.601043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ga.jspm.io/npm:es-module-shims@2.6.2/dist/es-module-shims.js","fqdn":"ga.jspm.io","domain":"jspm.io","tld":"io"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.915Z","timestamp":1788602391915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jspm.io","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 26 Jul 2026 00:00:00 GMT","end":"Tue, 09 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C3:51:01:D9:E9:12:63:2F:A0:27:A4:34:D4:17:99:88:E7:CB:17:AF","sha256":"1B:6D:76:EB:76:25:8B:50:2F:D1:F8:9F:6F:B5:FC:09:E6:9E:A5:74:54:EC:F2:5B:DA:55:AD:B2:4D:F0:FF:8F"}}},"request":{"raw":"GET /npm:es-module-shims@2.6.2/dist/es-module-shims.js HTTP/1.1\r\nHost: ga.jspm.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faces.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 13727\r\nx-cff: B\r\ncache-control: public, max-age=31536000, s-maxage=604800, immutable\r\netag: \"9f3f26839bafa97a\"\r\nvary: accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nx-cf3: H\r\ncf4age: 10\r\nx-cf-tsc: 1786942963\r\ncf4ttl: 604789.438\r\ncontent-encoding: br\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf1: 29674:fC.arn1:co:1786942949:cacheN.arn1-01:H\r\nx-cf-reqid: 578b181132a1e044dcff1469a47233ca\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":41837,"size_decoded":14337,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41792)","md5":"f8f292f54e5a763fe799ed5e67269c86","sha1":"772bcc0f728c51fbe937e468d776c95e2fc94206","sha256":"1ce44f8a98b7b9f6083cadbfc44a0e0d94b868903f13cf609dc239a42cc81024","sha512":"82376dfef7cd9b9b0a2a6065be31fa2a0ea6b19073131347e074380bda3c2cfa1bda11eebf830d438da54806fbe1c670f9f6d74f2f9ba3641c1a86572d44eb1f","ssdeep":"768:FbxyJAdDoykNTEdTW1HnXp73nz03qdDHH0MTDHDzadb06dnf9kYGeUtCk9PwzBnq:OXIhceE6xirLR6j0NcHrzIxpl","tlshash":"4a13f95630fea033c7c11ae3407b625b99144d58fe089939b728fa5798a76d38c23fe5","first_seen":"2025-11-22T20:35:46.015979Z","last_seen":"2026-09-05T10:00:45.602977Z","times_seen":7,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":4,"connect":8,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/090_ak1c2ocv7.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:52.145Z","timestamp":1788602392145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/090_ak1c2ocv7.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faces.site/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"090_ak1c2ocv7.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:52 GMT\r\netag: W/\"b9b7144d49760dd2b05fc2f692273dab\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/090_ak1c2ocv7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wr9vz-1788602392149-cb0c8b52a1c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1464,"size_decoded":1708,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1129)","md5":"b9b7144d49760dd2b05fc2f692273dab","sha1":"115f631c9b9fca54e7daca8bcbc2ac0ada300474","sha256":"b3cee6cf661b1c5d0bcf5311bdf1944583ca1b3b57d11023304ea1de073d403c","sha512":"15da344fe0d5f36a6e8fe63d6cdd0bf7184319999ac3f45369faa916771ab540eb2d76c58d1684c92326e7d888ec6f7fef3a3a665b3ab1d20358b6e630a4b4f0","ssdeep":"","tlshash":"483142bcda185097535900fe9163840712722a3a015e86a5f2387cad14a5a16c025eef","first_seen":"2026-09-05T10:00:45.605276Z","last_seen":"2026-09-05T10:00:45.605276Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0xab7rbkvbrtq.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:52.148Z","timestamp":1788602392148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0xab7rbkvbrtq.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faces.site/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0xab7rbkvbrtq.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:52 GMT\r\netag: W/\"f4a577129ed530a8b6c09792c8668659\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0xab7rbkvbrtq.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8t7pt-1788602392151-7a44c3b3c59c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":168977,"size_decoded":33241,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65251)","md5":"f4a577129ed530a8b6c09792c8668659","sha1":"9f5336438ad69d716d450b1b1f0e672d0632eb10","sha256":"02f2969c66d712d557459b98acea78aa32d6943897078095dfa3c8f06218790f","sha512":"7573deae8a2a8610eaefdb174db01b94f608439603a254f1c5950c86d6c5bf133ec529ce00ae279cb1cafea26fe74be88eacb01d1fc4f4cabea4344fa9f7c5f5","ssdeep":"1536:MmVbvvSnpvDJSUHvkiD5amstN84idkxdl4TA6HxHVJNcGaoI9/zhbOjlTRL:UpMMQmYwSd4RLbL","tlshash":"3bf3208b4399e8138e71fa94e97fe7e743144db1a5238962d10d2eb9ca4b471c7bc01e","first_seen":"2026-09-05T10:00:45.607015Z","last_seen":"2026-09-05T10:00:45.607015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0j0.g9e.c1i_1.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:52.149Z","timestamp":1788602392149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0j0.g9e.c1i_1.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faces.site/\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nConnection: keep-alive\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0j0.g9e.c1i_1.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:52 GMT\r\netag: W/\"bc54b72358641c9cdd4887fc0e844f5e\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0j0.g9e.c1i_1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::glq7x-1788602392152-e6505e4a286a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":107315,"size_decoded":35852,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"bc54b72358641c9cdd4887fc0e844f5e","sha1":"1c1e6b7083970d75875623ecb74fedc1b26eec76","sha256":"751ad6712a3d50c6adaa6d657dd73e173b64b321d9c1465dd21d78cea7fbb853","sha512":"14d0c220913f71a200518319864144019f30fff9ac6ab706e2bda80f9e9f087d5ad56aa1c93717512d5c4d2ef2722f2dcb3dcfcba1e1e5dc2eb75f919a277d07","ssdeep":"3072:fuR3ZsdfXeZKGlKnkNu1qYHCFH+AofFopYz0YI26wwMU5+DYZpWKw9PdHF9Ku:fLo8U5+DcZwxdHF0u","tlshash":"b2a33a107a8727f8d3aad442618b80d8915fd671a64b1914f0ffe13e1ed0865b38bebd","first_seen":"2026-09-05T10:00:45.608628Z","last_seen":"2026-09-05T10:00:45.608628Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/149__o_4c493..css","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.077Z","timestamp":1788602391077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/149__o_4c493..css HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"149__o_4c493..css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"40726d8f2133a88e7249001b6d059744\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/149__o_4c493..css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nrnsk-1788602391081-cdcc847418b9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":86195,"size_decoded":13373,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"40726d8f2133a88e7249001b6d059744","sha1":"b1c17d0c04e9faa37551f74e6a42a69fd0cb736f","sha256":"d2151783c4254e04cdb41a469154732dc0c4a5e688c2816638bf4f9f7ed7c6c0","sha512":"2c0f3a40b72d34f9eab2ef78ae19256556f6f2781d09d1b8661a345cf17c696151dae02fbc0bbc77d8bfe224a8e1cdc88beefd675f9b3e0f90b3f3830dd232ca","ssdeep":"768:gimsnBta/GhGvvJTCxdklQlsWjnNo4CIUPJZ9Srg+b0qj18wTc+lZXrKeECb:0/GhGvvJTCfeyOJf+g+4S8wA+j9","tlshash":"0e83f312b69fa5373c1bacbd4388a4ed77067491993243dabf01720b19eb6f534db608","first_seen":"2026-09-05T10:00:45.610692Z","last_seen":"2026-09-05T10:00:45.610692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/turbopack-061bqjigylw2p.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.088Z","timestamp":1788602391088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-061bqjigylw2p.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-061bqjigylw2p.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"43e67413f22e8dd642949075be9452e5\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-061bqjigylw2p.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nrnsk-1788602391092-7430fb2aeec3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10982,"size_decoded":5538,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10647)","md5":"43e67413f22e8dd642949075be9452e5","sha1":"bc256a3656a63b782c43fe67da3e451e7733d39d","sha256":"2925b22bfc04b4b3ece00c368ecfbe3029153e1246f4cb4ba0329cb6db5805fc","sha512":"726c9eff9004064f23eac977b530d59b4c44ffe97b7fbe82133ffa994ff963f2e7c2cff2238cec323321e5f71205289d901db705c786c6bc3f814cde79f0f7cc","ssdeep":"192:nnSBvQMElBC8QEsgc+9EilWLO4lg9aWQnZF8BT4FIhcXXqGsov6H:nSBvQMEltJ4lhnZmSIWKJH","tlshash":"c732c8da37a6f07343af91ebc06f4001f17984a9145d142cd3ac98eb28395ae85e7f76","first_seen":"2026-09-05T10:00:45.612564Z","last_seen":"2026-09-05T10:00:45.612564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/12au0naprr76x.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.094Z","timestamp":1788602391094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/12au0naprr76x.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"12au0naprr76x.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"7c0b4287ca7c2aabb7e1df5721ffb418\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/12au0naprr76x.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h2tns-1788602391097-8159f54e45f7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":174534,"size_decoded":60073,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"7c0b4287ca7c2aabb7e1df5721ffb418","sha1":"c512409d150e514d1f26b3186176a2ad3db72997","sha256":"9ab136d2ecae89c09341d571d2c7b82e59ccc2f14011cedc97b17df573a85294","sha512":"bb72fe0291859907b4cf69f0442b6315e9f28e1a0c08ecc6ab07de62d437d259872ab27a557ead5c3ec2c14d584d2008035e3d89dab5e28a05e1efebadd02dd8","ssdeep":"1536:y4lTA/lw0MXxeYJEBmomx/VGljOIzQal7SgC3yGJMtTYJSncZSGctBi1DuPSBl7z:y4lTYlw7XxDltIiIzigCFincZKBADEyp","tlshash":"f5041adbb679d03246e990e990350003e33a7b4a554c802cf65eddce399d94ea277f3a","first_seen":"2026-09-05T10:00:45.614039Z","last_seen":"2026-09-05T10:00:45.614039Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0oyf7yeg3ot9a.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.095Z","timestamp":1788602391095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0oyf7yeg3ot9a.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0oyf7yeg3ot9a.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"4402ff3c84ed3583ca56e91dd44d0311\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0oyf7yeg3ot9a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tdjj2-1788602391098-cdebc859ef49\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":61708,"size_decoded":15995,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (61373)","md5":"4402ff3c84ed3583ca56e91dd44d0311","sha1":"9066a2ad6355703c60988938c18e63218ecad5a4","sha256":"46e4972220db1c4f9cb4fcf7e1751b2f7f4187ae07bb5f26b3b0986c622c8a33","sha512":"b9027f41b7d012b141583e92dfdd4604e139eca844165d5f2773ae1c6d03981eca58dc3132ff00bcf046378aeea084ece5efc60559abb7ed74efc352f19bc1a4","ssdeep":"1536:lwSXj5Xt6VtzOxWMJIGOUC98pvnKzn7kW40DTYW9dSsNzPSOF6am4niTWVyzZQqX:lwSXj5Xt6Vt6Lwzn7kW4gt+IiThz3","tlshash":"8e53b6963756b0150be9128624b94443e2bdaebc421d18acf5ea51dfbb8cc45e3b3f34","first_seen":"2026-04-24T07:47:43.556685Z","last_seen":"2026-09-05T10:00:45.615948Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/favicon.ico","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.396Z","timestamp":1788602391396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 270115\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"c74460eda288a9da7d6f844e525fda80\"\r\nlast-modified: Wed, 02 Sep 2026 06:57:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b6hlk-1788602391402-001f7e8ad465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":188255,"size_decoded":51030,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"c74460eda288a9da7d6f844e525fda80","sha1":"d3c2f1749f35ed8e6cc2848db85b84e94067c76d","sha256":"457272213d4d9d16c285f52460b9fce863088f7ec010abcfffd41a3a42fc51ec","sha512":"3d66540f7009c317fda502b2e51edd786eeb5e789df1cb97228fa54f24d30060ccec6e2747c78f9dc2a0f4d19fcc48c80943c723055d9e7fd916cbc071084d79","ssdeep":"768:zL48Y4I0+zuZgBSCBoAqVbiU9lvEdAF/vMgjb/lkPqugdZHHZeXuJDABJXUz3pPw:vLVPHkguxgdPVFAPEzZNuWf22Gv","tlshash":"f80493817910c222e0647a78d857d9f84166be6df9a3e827f4d0ff1f377226b6431a06","first_seen":"2026-04-24T07:47:43.554989Z","last_seen":"2026-09-05T10:00:45.617898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/097idasj_f99h.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.632Z","timestamp":1788602391632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/097idasj_f99h.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"097idasj_f99h.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"536bc2fe20c92ab788a785b64fab9ad6\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/097idasj_f99h.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wr9vz-1788602391637-e717b6e55401\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408162,"size_decoded":129795,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"536bc2fe20c92ab788a785b64fab9ad6","sha1":"2bf6553c9d3b09b356c7c1269bd080ef7f784239","sha256":"1f9e6fab610d575f78ab1e2ed2679457a507514255ae99d984a788fcc955a3ae","sha512":"b7d9eb799c5185f59d2171b401d8a20ee6c109252789c9143dbd5ff8611988900b5e85365220ac6eb126f0eb0243901bd45082aa429351ff5bd90cceacf20a32","ssdeep":"6144:1OAtyKaZgu5BaeG8EEtPP09DpOajvYbzDSum:gy9eaZvEtPM9D/jAM","tlshash":"2e945c9d7982786d539b8255806f0006e2bd690a300e483cf570d9efb876ed960bbff5","first_seen":"2026-09-05T10:00:45.619972Z","last_seen":"2026-09-05T10:00:45.619972Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0ptk9c~9tbp9o.css","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.634Z","timestamp":1788602391634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0ptk9c~9tbp9o.css HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0ptk9c~9tbp9o.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"3f8400c9632f1ba50ce1ebceaccb1901\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0ptk9c~9tbp9o.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4smpp-1788602391647-c00e6ac412f0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3911,"size_decoded":2396,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2029)","md5":"3f8400c9632f1ba50ce1ebceaccb1901","sha1":"28580d17455509823af4da588010b009cfdc0493","sha256":"bf02f2d345073d1dd60397dac43c590e921ae5011013d6ba7daf7e807085a7b3","sha512":"1b98f00e5faf30a27ef94215462bde9310df217fc11f1263c7f4d824511e6ed0dcd40ca6d50ff1b94fb7c5c370e18214b1187b5c61f87b0337bbf1c122bf5f0b","ssdeep":"","tlshash":"0c810229221e500cd3a389e27dccb547150a54b4d6ba2ba6f9951e7ccefb0770396b2c","first_seen":"2026-09-05T10:00:45.621549Z","last_seen":"2026-09-05T10:00:45.621549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.076Z","timestamp":1788602391076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2 HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faces.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 270999\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\"\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: font/woff2\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Wed, 02 Sep 2026 06:43:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b49zp-1788602391080-15a5043a6055\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":49478,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-09-05T11:07:46.267822Z","times_seen":98782,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/15hnrqt0stqff.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.090Z","timestamp":1788602391090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/15hnrqt0stqff.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"15hnrqt0stqff.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"1debc50a587a3c024caceed7dba52c4c\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/15hnrqt0stqff.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h2tns-1788602391093-dbf816de7ef0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4243,"size_decoded":2900,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3904)","md5":"1debc50a587a3c024caceed7dba52c4c","sha1":"5f21d9b579891b73ecccf1ea71a239b61d70dd30","sha256":"e5da89a0ee45dc17470aa5bf1e2542cd0b11790f6756445853f587a5d0464357","sha512":"bb9ca129ebc82da4b6ca1c22cd16794ba0ce34855e12b6c5e12ee52805751880663dc6867d24997b0275457e13da2d2f09f2d5faa9aafa76e31ab3d169b94fc9","ssdeep":"96:nv/Sz2ukB/8ys5sAdAMCRGwouWx7R6ulzw7+KiMb8DXC84:nnSzV/yseAdA5poZx7RRzwKKiJXP4","tlshash":"b791628e2740255d095d02a1d0f25d871770822600bdb0add1ee80ae34aeb8d5fff776","first_seen":"2026-09-05T10:00:45.623522Z","last_seen":"2026-09-05T10:00:45.623522Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0kb7b2qyedezr.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.099Z","timestamp":1788602391099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0kb7b2qyedezr.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0kb7b2qyedezr.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"85efa8c2b4afa77a7a4c0c5292695f9f\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0kb7b2qyedezr.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tdjj2-1788602391102-2c12e71b9cce\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2685,"size_decoded":2411,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2350)","md5":"85efa8c2b4afa77a7a4c0c5292695f9f","sha1":"eba3e80e02fca93016382622f2e7013482efb9d2","sha256":"015a96fdb131d6404bfeb78312df17fae6f74117aa473c86adab68f647a094e0","sha512":"ead19b05299066dd659994e8a4f3ec5f1fa364c57e5f9c94669a36d92dc5646ce04904a27c5594e3edc190f0df62ae35d65d82df84f53ede42aef50cdbafdf06","ssdeep":"","tlshash":"a751d48a8e215408768282c8d23b8028be9b143d374e977577bc8e35b219cca24773c2","first_seen":"2026-09-05T10:00:45.624774Z","last_seen":"2026-09-05T10:00:45.624774Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0u3i~830mjw4_.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.617Z","timestamp":1788602391617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0u3i~830mjw4_.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0u3i~830mjw4_.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"f415069e221b3d91164660923f3f42ba\"\r\nlast-modified: Sat, 05 Sep 2026 09:59:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0u3i~830mjw4_.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::b49zp-1788602391620-b4d1a9081990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29393,"size_decoded":11652,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12311)","md5":"f415069e221b3d91164660923f3f42ba","sha1":"af16d825f202e1a4982b1a9e7d48c02176dfa8d2","sha256":"7b200800a36913f451e8a555283c0646f8efbb7a80fdb0e31077da1bfc6ded77","sha512":"ac37805580a8f9b325722f7ee5b5fd3dd6dc9ad4129429bd13a652333145390ad2a07ca0816137091a27c9f6e42b83380a30eac9019041f027bdc81dcd39a80c","ssdeep":"768:nSxIxFUK34RW+pPfQpLrkOpRwk1VZJqWDV:6IxFUKIZPoNXRp1DJq6V","tlshash":"b6d2189b7660b42103ae10e6f0ab5906f7391617201eb468f1ed96df3f6084988f3f6d","first_seen":"2026-09-05T10:00:45.625703Z","last_seen":"2026-09-05T10:00:45.625703Z","times_seen":1,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0c8k.gc7snz~g.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.626Z","timestamp":1788602391626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0c8k.gc7snz~g.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0c8k.gc7snz~g.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"64f17237f436bd071511ed09fe7a240c\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0c8k.gc7snz~g.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::57sxv-1788602391629-99b9babb066e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":971798,"size_decoded":303561,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38447)","md5":"64f17237f436bd071511ed09fe7a240c","sha1":"e1eca7e6728c86cc1f16d049e3f31b833bd9421d","sha256":"07698002f9d95fd6e3d8250279a6921117ba4ef98d2a0ed48b9f2cb7faf035e6","sha512":"d905bf74c9bd59dcde9300d1543e06a4cb977b05316fc9ec3eaf451224851be8abfd09c79e46880f0054b3c86739b76703a710ec050eadc073ee7818fc2c4106","ssdeep":"12288:ZBIqB8/2qVltQgA3lJ0EISK+gPizKr8oOmPaCIgVYsoIuWagtV5:3h8xelJ0EISK+ro5aCZJagtV5","tlshash":"d7253aa673517036d3df519a90ab4004b33a6955680e402cf27cacef29e5548a3fff7a","first_seen":"2026-09-05T10:00:45.627605Z","last_seen":"2026-09-05T10:00:45.627605Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/133qpek~8xstd.css","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.636Z","timestamp":1788602391636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/133qpek~8xstd.css HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"133qpek~8xstd.css\"\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: \"1daf025b895d7e04678fa33e8854db4a\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/133qpek~8xstd.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wvzrd-1788602391639-b0f24e5d67dc\r\ncontent-length: 893\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":893,"size_decoded":1905,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (893), with no line terminators","md5":"1daf025b895d7e04678fa33e8854db4a","sha1":"24ee581dbc9313851046c01efa125ad113fa6b4c","sha256":"9538f000c6ad25ec6884324d308b71cb4835e29a5a0f5a669dcb83563e9658c4","sha512":"5923d6d544597bf32a67554f718b2ac935f8463525185f621f34adc3c712ead47b95800aa3fd4e3d6f42cd0dfc58f0b027cb430b149e0f21aa65d5b90281ef8d","ssdeep":"","tlshash":"8c112f26702c26adf3a09616ecd0a74de36b7006eae979c91d84edad05df9480c7438c","first_seen":"2026-09-05T10:00:45.629091Z","last_seen":"2026-09-05T10:00:45.629091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0w_wdagotonpu.css","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.637Z","timestamp":1788602391637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0w_wdagotonpu.css HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0w_wdagotonpu.css\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"1ce370082c467a6bea97117ec2d0a39f\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0w_wdagotonpu.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pghc4-1788602391641-019f8391a91b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1163,"size_decoded":1485,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (633)","md5":"1ce370082c467a6bea97117ec2d0a39f","sha1":"4f0c2c29a464b77a5691fe4a547cfcf8736120cd","sha256":"412f29b9d7e2de48a712f4bd682b005ff6098d25613e869be31c946e90210d27","sha512":"811fa332152bddfd110251cd8537f074b21a5ac632e10d86cab58dfba03f661156e4e15741d5213f20ff475a2eaece7615f39541ccfb4c56c34bd6c03c415f22","ssdeep":"","tlshash":"212102709a9f6315b0634f32b7f82a502900551211b30c6af3284d388fd7dd732a8b94","first_seen":"2026-09-05T10:00:45.638445Z","last_seen":"2026-09-05T10:00:45.638445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.364.6","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:52.123Z","timestamp":1788602392123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 04:32:20 GMT","end":"Sun, 29 Nov 2026 04:32:19 GMT"},"fingerprint":{"sha1":"12:D9:D6:77:38:5B:C9:F0:5B:CB:FA:8D:A4:FD:DC:38:9C:E2:0F:B0","sha256":"AD:D0:73:85:E5:83:92:52:79:97:D8:28:6A:6A:7F:D7:3B:EB:B2:29:18:06:17:3A:9B:6B:88:71:F6:4C:7B:DD"}}},"request":{"raw":"GET /static/surveys.js?v=1.364.6 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://faces.site/\r\nOrigin: https://faces.site\r\nSec-GPC: 1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:52 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a3646236c864568e-OSL\r\ncf-cache-status: REVALIDATED\r\nx-amz-version-id: mkT2HBCqXJNbVh_B5XH1RZTbkzlk_uY_\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Fri, 04 Sep 2026 10:04:13 GMT\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\naccess-control-allow-methods: POST, GET, DELETE, PUT\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nx-amz-id-2: nu6+A9gxB4KQ7TgDiI/zQtos+4v1s137czncu1fu9pEswXVUTh41ZmlqYZD6n7nzam7w8eV05jY=\r\nx-amz-request-id: 1P69GHSAJ3Z360ZJ\r\netag: W/\"10c4163f08efe5aae00420dc1b9537b8\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":102477,"size_decoded":35114,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"10c4163f08efe5aae00420dc1b9537b8","sha1":"7f0f472a66befa575f3871c95775cedc1ebaf4b6","sha256":"eb4b20d53b36120d77bc9e853173572d13d1cd8dd959ee085b407cef837948a3","sha512":"cde1429d2d1a5b8e42bd159bd61d14beef4ebc4c58012c7073e8cae0eaae16236be3f2eb370decb5958df1916fcc2f1f7e5c600caed87775e9ffd9f8366aa60c","ssdeep":"1536:H9LuXgsAu2aE4BHDVYknZbaBA5d0WBlwaXd+y:HVuwsAobhDVIRAlwdy","tlshash":"b3a35dd5ba41e16d51eb80b410be5843f33d2b0aea0d8c54b1139cd83dd6989a39ffb6","first_seen":"2026-09-04T10:28:35.956932Z","last_seen":"2026-09-05T11:38:26.359389Z","times_seen":190,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T09:59:50.747Z","timestamp":1788602390747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 641337\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:50 GMT\r\netag: W/\"79942fbedd2aeb10d185f415ffb7cffe\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /main\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wr9vz-1788602390845-c28a64d588f1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16609,"size_decoded":4888,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (16609), with no line terminators","md5":"03d4b327b998bc38c3d77c1cd1c2e8c8","sha1":"a2e55dc82690becd4b1ea6ed6f79de6d5c682233","sha256":"7cb12aeea5900b91f9f185da3fe5d9d6b382d4707d6c4e0979e77b7e95d34744","sha512":"177d767d45942da3e2e818151624b745f42a78a6d70bd9bf16f53f607143cbd17e98c5a31bfae9bbe210219c4149cd7cb3a6b187e1de7fac56ce8054ed7f5a45","ssdeep":"384:HIUOl6cWhfa/QFv7CP1QdbtGh9wfS/E/Lnr6:HIUOIcWJa/mvTbtGofS/qLu","tlshash":"9772cb9ffc0afd119c37ad9d027e5e3624ca98378671c57cb69dce9807a25764bc4880","first_seen":"2026-09-05T10:00:45.642941Z","last_seen":"2026-09-05T10:00:45.642941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":57,"connect":8,"send":0,"wait":10,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/16z6.oprq_u3l.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.078Z","timestamp":1788602391078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/16z6.oprq_u3l.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"16z6.oprq_u3l.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"eb309c92dfbd19dd8403dde00faba538\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/16z6.oprq_u3l.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4smpp-1788602391092-c681c63f25e5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":24245,"size_decoded":9264,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23910)","md5":"eb309c92dfbd19dd8403dde00faba538","sha1":"b61c1f4ebb4d6dba52564280f98381a9663dced4","sha256":"a147846d2fc61f6d31d80e15a7af3343a7620df81206b60af6b6fc5809d9a7eb","sha512":"a500ecfbe977a8f324684e14b9424f10b116c66408a9f0a7712c747d2ac327651f5c68f2305ae971949a821180b10bac4188d307c97b387f948982890c2b3289","ssdeep":"384:nSRO7aWgxkqcClBbRd8B2C12e62VKFPQX3De1foIfG:nSRO7hgxRccHdZCh62VKFoXz+fA","tlshash":"cbb2e7ed7195f4610aa365a4803f410bf2391db6285d90e0e3a2dcf579b4a9ec133f5e","first_seen":"2026-09-05T10:00:45.645218Z","last_seen":"2026-09-05T10:00:45.645218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0ss7l-362m_d~.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.082Z","timestamp":1788602391082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0ss7l-362m_d~.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0ss7l-362m_d~.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"6cecb6f3e0cd8c732bd0fdbb4e54d8f7\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0ss7l-362m_d~.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ggs8b-1788602391086-54a8d529bc96\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150521,"size_decoded":42693,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"6cecb6f3e0cd8c732bd0fdbb4e54d8f7","sha1":"864ad160d01a73d44caacc070e0affc6b6da2e01","sha256":"d99baf965e60e7c46db28c9eedaf539177db76448fb67d2011fdb196b7e7b79c","sha512":"800b3f56703799889b5c8fa2a7898da84fdd73d06840a241fd1401cfea507f7f23cdf4f83fafe3dc87da45b5dade10f16f9d68fae01f779021bb119af6cd9a4e","ssdeep":"3072:4W+z9mmbEoXhqZF3OpDeTgPkBQxwR60TGeqA:4P9mmbEoXhqZF3OpqTckCwrGeqA","tlshash":"25e3e7f936d1f48207ab40a6c03f0006f22d4d77189e6860e3e5ddda796465de1b3faa","first_seen":"2026-09-05T10:00:45.646938Z","last_seen":"2026-09-05T10:00:45.646938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/10.8b-ruemk7m.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.096Z","timestamp":1788602391096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/10.8b-ruemk7m.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"10.8b-ruemk7m.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"919b9a830f93d4ffc32764945a718cf8\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/10.8b-ruemk7m.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nrnsk-1788602391099-5845fcf6fc6e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52603,"size_decoded":13959,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52266)","md5":"919b9a830f93d4ffc32764945a718cf8","sha1":"1a48e4198475c99b933ed8c2e2c6540e56eb3827","sha256":"9fadddaac0835ab16dc1d1b4530e33b686007dd049eaa91d82e94fd4b0f9cf0c","sha512":"446b75fc646beb1e2aa81dcce685f25e169570d112a737dbd9740819617bbbacc55b81b1c0adbbd9fd8278f4e50fb3b7d27c7c9bd161188f18d6e41bb0cf450b","ssdeep":"768:nSBU6K9OKIE68sEoNtIX5MffjQn8q+ZsXH:AfXNMD+mXH","tlshash":"d933c6b53291fab602db91d9d0370012f2790c7120ad64b4b394dcaf399dd8992fbf69","first_seen":"2026-09-05T10:00:45.648648Z","last_seen":"2026-09-05T10:00:45.648648Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.610Z","timestamp":1788602391610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 04:32:20 GMT","end":"Sun, 29 Nov 2026 04:32:19 GMT"},"fingerprint":{"sha1":"12:D9:D6:77:38:5B:C9:F0:5B:CB:FA:8D:A4:FD:DC:38:9C:E2:0F:B0","sha256":"AD:D0:73:85:E5:83:92:52:79:97:D8:28:6A:6A:7F:D7:3B:EB:B2:29:18:06:17:3A:9B:6B:88:71:F6:4C:7B:DD"}}},"request":{"raw":"GET /array/phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc/config.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://faces.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 09:59:52 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\nvary: Origin, Referer,origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://faces.site\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Sat, 05 Sep 2026 09:59:51 GMT\r\ncf-cache-status: EXPIRED\r\ncf-ray: a3646233aca5568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1212,"size_decoded":1250,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1013)","md5":"a9041c21e5f4b844e808f4ff9d6e2481","sha1":"642ee66c72b56a85cb37767719db37f9a0956915","sha256":"c8cbd67f347b60ae68dc5fe9fc51b4e0e5e16c94fa09b8a363f7b2d3d17c3f3a","sha512":"725a2143849040c5b0b5f71c28371be18a51e762aa9d0633d9d986db894bba55b3ed2926b0886543a78e69fe519ab3700f66003f60abed68a214f3b181aed153","ssdeep":"","tlshash":"bd21112d29690579988e4324ea873e019ffe022731486c5cf8c88b4476ef5df5652b03","first_seen":"2026-09-05T10:00:45.650949Z","last_seen":"2026-09-05T10:00:45.650949Z","times_seen":1,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":409,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/163lkq8b7bmbf.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.619Z","timestamp":1788602391619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/163lkq8b7bmbf.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nCookie: ph_phc_VhCbh8HPnz88mFRQNKDb1W1QMjyUULxGMxfDrgMgKBc_posthog=%7B%22%24device_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22distinct_id%22%3A%2201a07102-9c32-7389-89ca-f441666b5f6d%22%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"163lkq8b7bmbf.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"049cbb5485eefcb4f316292a45dd9343\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/163lkq8b7bmbf.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pghc4-1788602391622-4257abeafadb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":33750,"size_decoded":14420,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8232)","md5":"049cbb5485eefcb4f316292a45dd9343","sha1":"66cc3b1a7f92f79e4c45e1c96f6979c4304be982","sha256":"c1129cfc0f4828f5f733aa055b27f834272dce0dca5d6b30870a0a5a707c5860","sha512":"ec6eb253246b679e94c36fd42a6969a3c175c390f9993c1a8f6e1cb435f7b5d3d860f3656ad8ebe7ad5b3da55560bc0671973ae4fd78d7b13df338343af58303","ssdeep":"768:nSPH2mRcdkiyLnbcRwij6W7FOPDXOR9PG1c78IOFVLq:I2mdGDDwPDXOR9+eoRq","tlshash":"6ae25c2637c03b3e139b01a1b95f9542f7380322625fa05df1eed5e82f589458a73bad","first_seen":"2026-09-05T10:00:45.652742Z","last_seen":"2026-09-05T10:00:45.652742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"faces.site/_next/static/chunks/0_~xvyz.n3n~m.js","fqdn":"faces.site","domain":"faces.site","tld":"site"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faces.site/","date":"2026-09-05T09:59:51.081Z","timestamp":1788602391081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faces.site","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 07:12:44 GMT","end":"Sat, 31 Oct 2026 07:12:43 GMT"},"fingerprint":{"sha1":"C8:CF:E5:33:B7:B9:CA:A8:4C:72:93:0A:02:67:B2:75:0F:41:0A:5E","sha256":"01:98:7D:8C:2E:9D:24:92:57:FB:A6:A8:FF:F2:F0:15:D6:FF:40:E4:2C:62:B9:3A:71:52:30:DF:BD:3E:0C:CC"}}},"request":{"raw":"GET /_next/static/chunks/0_~xvyz.n3n~m.js HTTP/1.1\r\nHost: faces.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://faces.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 274107\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0_~xvyz.n3n~m.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data:; connect-src * blob:; img-src * data: blob:; style-src * blob: 'unsafe-inline'; font-src *; object-src 'none'; media-src * data: blob:; worker-src * blob:; form-action *; frame-ancestors *; frame-src *; base-uri 'self'\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 09:59:51 GMT\r\netag: W/\"99e264c3973ca7f377b18878e205b100\"\r\nlast-modified: Wed, 02 Sep 2026 05:51:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0_~xvyz.n3n~m.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tdjj2-1788602391085-7d2e0ad5c7c6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52484,"size_decoded":12426,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32114)","md5":"99e264c3973ca7f377b18878e205b100","sha1":"c1078e1a215228043851f653ef931f5b7b6ef16b","sha256":"382a9dbc844d42b61a75a7574493606b6ef07b71cbcd46d688e1e8d8162fde6e","sha512":"c23097350fa34d3c76f6f8e448e397757f63794cbfb6e26ee85def6a4f62f6a2cf4daff60e1a25905a83e485846206dbe1f8ff2403dd147482a2d8e74e7cc180","ssdeep":"768:nSBb+ZBpQP1/ZUg/Lpl/v+GMHhmML0JXVyU4i:RZXY1/ZUgq4B","tlshash":"5833c5b172d4faa2139740e5d43f2017f23d0c7120ad7470a3e89cdb754898da6bafa9","first_seen":"2026-09-05T10:00:45.654997Z","last_seen":"2026-09-05T10:00:45.654997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"faces.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}