{"report_id":"388bd8d7-f3df-4542-9b81-9e33e1e081b5","version":6,"status":"done","tags":[],"date":"2026-02-13T22:31:03Z","url":{"schema":"https","addr":"casetuns.com/","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"172.67.177.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casetuns.com/","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"title":"Navi Roulette","dom":{"size":11582,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (513)","md5":"f2027f93ea8881caf7d443b372a254ef","sha1":"9ed742c28720cffe1e862f576b8392d7faeebee8","sha256":"0a0df85a8b55a4a6a5a79fd407f816df8846b87d090cb3529031f2e2bd0b19ba","sha512":"3f16daa220228d336f311740e9cbc2bd599864863c340cf7e935f8f3035ec8e07a818ec93392346ebf5dfbecf0f4c787f836025b5a7808aa7cb5432a7e763d6b","ssdeep":"192:i0L4ShTpSo0PvRTJYSinMz+R5T8iJyKCXUSrYblWaWOdB56:i0L4ShTpSoQDULJYkWaWsL6","tlshash":"7832d7d595e9191ab037d0ea79924b1a7fc4d543d80f8d9873fe06ac8fc6eca982740c","dom_hash":"domhash85792f9995a47a843c39c96537a9d97e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"casetuns.com/","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"172.67.177.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T22:31:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"oldddrewq.com","ip":{"addr":"185.125.201.125","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-01-21T12:54:58.380748Z","last_seen":"2026-02-07T12:50:36.077104Z","alert_count":2,"request_count":1,"received_data":403,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-02-10T22:11:54.733373Z","alert_count":0,"request_count":1,"received_data":57188,"sent_data":666,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"casetuns.com","ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-02-12T20:38:25.005493Z","last_seen":"2026-02-12T20:38:25.005493Z","alert_count":60,"request_count":20,"received_data":5435918,"sent_data":10474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casetuns.com/","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46564c852fc4895aca8c3ad3c6ecff70","sha1":"c8c71f88a43ebe33009bfba15c25498a5ceacead","sha256":"eea0b6bb81491caf72c75dc8a9ced3d5c82223d24582070b232e67239150b5c9","sha512":"17adebb73d600d3fd838879f8d640b62962231f952ef14348715996751c1e5eca72d284d3a047c27ec3ceb75c652522d33320e6ee7c32f776d53c2182cbdb0d0","ssdeep":"","tlshash":"2ed0235f79951c3208ff355745265794367300031406700136ad49344f30fc100b5e45","size":199,"data":"","first_seen":"2026-01-21T12:55:04.538395Z","last_seen":"2026-05-03T18:40:44.93227Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/k2riw54dhndi.js","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc1c536b72957316ae68032687021956","sha1":"5a0db32bdab3e01b94855cb253f382d33e8289e0","sha256":"346b8844618f6f192ad526cf9bea66b26a54961e662c05d224bc47be5146b56e","sha512":"69e0708ee6ef2cdd1b26a84fe872270ef1cc7f3e573b89ef35f91f10e6e174b1c7915952be34118b1601c5ee08951a31780296a4130b0e556611056762b52724","ssdeep":"6144:dUPvDRSWtDuXqrMaIXahPQMWWxm7xzkuvipIMm6L:di8WtDuXOHIXahodxzksiM6L","tlshash":"7994c5713bc1a859539b8fb7b21bb8e5fc2e08af2c540d5bd240fd60759192afae1530","size":418325,"data":"","first_seen":"2026-01-21T12:55:04.521414Z","last_seen":"2026-05-29T14:16:16.707239Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/button-open.d7dd6b6c.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/button-open.d7dd6b6c.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-a123\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wD64Yp2tiwYbb3VuODPIBcpFpBrfd5fPFI8%2Fj63Fi2JeoUzxlNw%2F0dthjOHfhMva2YVbUtmdsh3hzD28%2BhUzG0u5TH2YCT2LmYKJyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c58649f9370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 494 x 118, 8-bit/color RGBA, non-interlaced","md5":"e8ef544f958d34fde2a758bcf1e9fd76","sha1":"986a0819679b8221fa057e7b8aba4f982691ec89","sha256":"104fd15457dfba2050ce627d817e1981c3d45c427999143ad228ffea7c28c5d3","sha512":"23d4d6f6da2aa35a1aefd15be2a6042112d16331ce9278aa9f806575866b2ade87668bd9671605a1272779ac526bc157186019c8178f6c20fc9dec154a800fad","ssdeep":"768:Ca4EWkbgLQODARuBxh2zO2jiO2BWPxHlhEu1xja7l8S2HldNOCKErHd:CaShLxcuBSrRlh31c8dHlqCKErHd","tlshash":"b403f2a9cd63d3dcb036645751fe22e47a425362025fee2186eb8225cce73d981c3f5a","first_seen":"2025-03-25T21:21:04.766463Z","last_seen":"2026-05-13T09:47:03.00667Z","times_seen":29,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/person-1.8e2c6cbb.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/person-1.8e2c6cbb.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-62b07\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnZZLf1TEmRzWpylPoqQ8m7hz9e1j7t3qbTH9%2BTXgS2un2jC26Wfsom7AjAVmChOCjApsyCCWnuf6CCBGvzXWswuWjYLE8RgdK89LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c5869a0a370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 591 x 831, 8-bit/color RGBA, non-interlaced","md5":"759f56511585956dad0e84b1df42c3ab","sha1":"59c4ed7f1d665116b1e0435637dc7782bef7f6b2","sha256":"eae3158576b21ac987c6da6b0024ff76d5bec37934dd3fc112df3bf9d12cec70","sha512":"0738302a690430a2ae465f5f3820bc5c85431bbb2fd1c433f58dd77bd203434011095b64b8e6c2dbbf404161c0ae5e664e8e0d4e7266070c65fb7d301fa5ef91","ssdeep":"12288:FtfiCf/9OM5vUqWeZvh9sbELnQer1GlVUPx:FtqcoqWeZvh9znQwykx","tlshash":"658423764e61d4ceb9db3da13137ad086d53128e3a8748d84863723982f056defe36d8","first_seen":"2025-03-25T21:21:04.838114Z","last_seen":"2026-05-03T18:40:44.92257Z","times_seen":21,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/person-2.568f999b.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/person-2.568f999b.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-76634\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7DIamZ6Xp24yh5a22e303cftA9eGNIskJE45I5xtxpx0YjNwh8iebmhXZBl16Wg8HEg1RZakZfDXWonhBcXLKKXNcNghinYbp1FQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c5869a0b370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 831, 8-bit/color RGBA, non-interlaced","md5":"25de64897aab9cae72447a740f702fbc","sha1":"709891292d14cce8dd7a1955aee8d7e2eba5ca46","sha256":"45ac754add0b3cf4542ea574679498965dffcffff7ed2e56b1553829d5dcd58b","sha512":"83fb7e870cff9cb304a11b9c2d0080935c17ccd0a71871c195a259f24f975625fe19782da3b78f9719ca94ec0933dd79e94ad00b894313f89a7490d006a7c7fb","ssdeep":"12288:Rzu5uYbUBFaHxsHZXY+uSGalTLmmNDbN5xhpxwkwz:lFQAFaRsHlY+Gatim5Pr1K","tlshash":"fca4237eede9f11c2cf61b514806a732878e64e93c25d0e45f426e241b12e0e7ca77da","first_seen":"2025-03-25T21:21:04.797805Z","last_seen":"2026-05-03T18:40:44.930058Z","times_seen":21,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/87ddd3229135f8c9-s.p.woff","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/87ddd3229135f8c9-s.p.woff HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casetuns.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: font/woff\r\ncontent-length: 41224\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\npriority: u=3,i=?0\r\netag: \"6973eedf-a108\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgO%2Fo3HsC3TLIin8dHIxMHulCG%2BPsY4X85mSLGRdlv%2FwCtd8rLO7i8xHZsICvt8d0wWmPVK66hJVJlinsMitgZboA3CjbbpMVvxulQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c584c9c5370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41224,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 41224, version 0.0","md5":"375cb9c3fcdad60c78fc841e118b300e","sha1":"c8e39f4dcd3cd3be9960d13dac01a271837d85fa","sha256":"1653c1f329d10a9edd664871183d0b09866c491eb15e3f4d759c0f403ff1fade","sha512":"8d77803d079e63f16bd789b4c08ae6b30e00bb629552fe8197d069b40d7c73165d22f00f8924392c400ef9a04036152983694ddf49be5b5b8f7fd19e2f446027","ssdeep":"768:HJh/zfum85Hk/dMext52XayC9wuVzIrD9QEZiFCPb1LmemJ5a:phrGm85Hk/dMeD5SC9wu2rhpZH4tW","tlshash":"c503f10280569b87da3f15f137989243b7b8e923dc44736c11583a1562a6c9bdbccef7","first_seen":"2025-03-25T21:21:04.787966Z","last_seen":"2026-05-03T18:40:44.91477Z","times_seen":24,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/team-shine.0d1438cb.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/team-shine.0d1438cb.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-8ef84\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxtsCR16tEAK95%2BCX6G9oHftdRvAbo3IcqB0TxdwV3b4MRqvxKB9D7pBQgI2Bb8o8IsXs8laZ4fJS0AMsq8oMGXd14YkVLSI%2B7PVXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c58649fa370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1189 x 556, 8-bit/color RGBA, non-interlaced","md5":"5dc4dad5ae7fc39dccd1b35b13fc693e","sha1":"5ebdb3e907f0482eb06ddcc10ecdf30a43dc2ae0","sha256":"7d3b44909b43c21dd7665f2449fef61f985f8d1ff806da21de059f049e0114b1","sha512":"dfed61a940d6593b3f0ec5237b985badda8e4dbb1c4d4245cc7d6d8443d817d35eb6ac5cef75428c31a2083a34c8735363c037ff2c6095a4c876919d10f4dcaf","ssdeep":"12288:/gdkVrTMAgPkh7D2m7Epbemzyv3uFzIRq:/gMMdkh7D/Alhmi","tlshash":"cdc423caacc775b2d4ecc9d3869bb961e4f6120ee59305c65122f42344e363be6dc892","first_seen":"2025-03-25T21:21:04.829009Z","last_seen":"2026-05-13T09:47:03.007327Z","times_seen":29,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oldddrewq.com/dmmclnsjtooxckxflqmmouyxdvfadtnnqjqwihqejqdefn","fqdn":"oldddrewq.com","domain":"oldddrewq.com","tld":"com"},"ip":{"addr":"185.125.201.125","port":443,"asn":9123,"as":"TimeWeb Ltd.","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oldddrewq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 17:15:21 GMT","end":"Sun, 29 Mar 2026 17:15:20 GMT"},"fingerprint":{"sha1":"A8:B6:F8:2A:A0:19:97:57:D7:64:A9:6D:B5:EE:72:B1:A2:20:BF:04","sha256":"63:CF:E9:DE:EF:A0:71:02:92:BC:C3:11:C3:7E:A9:A7:1F:65:CF:D9:1C:37:0D:0F:9E:A0:25:66:71:05:66:74"}}},"request":{"raw":"POST /dmmclnsjtooxckxflqmmouyxdvfadtnnqjqwihqejqdefn HTTP/1.1\r\nHost: oldddrewq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 150\r\nOrigin: https://casetuns.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":150,"data":"d=casetuns.com\u0026u=f-mllgodv6-0s21e91o\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 58\r\nETag: W/\"3a-LiE8uV/Mi3/ekU1xhjakFC8zVcM\"\r\nDate: Fri, 13 Feb 2026 22:30:41 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"925f13067efbd8e626e9dde074f7886f","sha1":"2e213cb95fcc8b7fde914d718636a4142f3355c3","sha256":"e2c7391996d35ba75e8700f0ee2dd71cc7b5567236ef83c8e90929393f92715f","sha512":"d7e0714f6bc1ddde87d3ae25c897a90767427b6b611afd72e2037a5ab2cbdd8ff9be96ad8c59fa1a2eac413ec8d2cdb1545613013c5ab2cdd8b5a468893284ce","ssdeep":"","tlshash":"38a00281451055fdc513885e474e6f004d3c002669c46456f00c194851b145fc006533","first_seen":"2026-02-13T22:31:06.96889Z","last_seen":"2026-02-13T22:31:06.96889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":139,"dns":63,"connect":42,"send":0,"wait":758,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/k2riw54dhndi.js","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /k2riw54dhndi.js HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6973eedf-66215\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=osZsF9WUKm86994S4fHixtsMKzQIxYgETOdRMpIY%2BJkUYDaZqL0adty8ELbTFUl8WRS4Fie%2B8Z6Zu1wh%2BN8upOeSiFgVtjgwrOKlXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c584c9cb370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418325,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fc1c536b72957316ae68032687021956","sha1":"5a0db32bdab3e01b94855cb253f382d33e8289e0","sha256":"346b8844618f6f192ad526cf9bea66b26a54961e662c05d224bc47be5146b56e","sha512":"69e0708ee6ef2cdd1b26a84fe872270ef1cc7f3e573b89ef35f91f10e6e174b1c7915952be34118b1601c5ee08951a31780296a4130b0e556611056762b52724","ssdeep":"6144:dUPvDRSWtDuXqrMaIXahPQMWWxm7xzkuvipIMm6L:di8WtDuXOHIXahodxzksiM6L","tlshash":"7994c5713bc1a859539b8fb7b21bb8e5fc2e08af2c540d5bd240fd60759192afae1530","first_seen":"2026-01-21T12:55:04.521414Z","last_seen":"2026-05-29T14:16:16.707239Z","times_seen":24,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/css/bcf2818d57aadaea.css","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/css/bcf2818d57aadaea.css HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6973eedf-4abf\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cS%2FMigCM1EI739Tq2FX8gtErcvwLe%2BmEEdvyY2QX1mgRNXxqA1EFvfXpfaj3tH5ppL49j%2BLv6qz0AANRtcaNTfJIuk2CxQ%2FSj4tl3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c584c9ca370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19135), with no line terminators","md5":"cbe02b5df8e3fa793a1a7dd846c9528f","sha1":"e610a2a74810395dcadbabbdf9110a6cbd1fc576","sha256":"699cf8a528b763e43efb139871e4070075bfd6424d4035b9feebdf208207b203","sha512":"db88dabf6f7d23757e2a39c135c8e148ca3c693728306d7e3f87b68be45090d60eb15f3c183371f415f8035ccc7a3e30c5dd874a1d9d7f92626847888e3c204e","ssdeep":"384:7ERQg1pV41QtQZUDDeVb49ngUjckSqLeg3gh6eg3gr38e7:7EfHV41QHaxqL3wh63wr38e7","tlshash":"39822bb1a3d071ccf80bcba1b561893d320ed879b717dedc4ec52a70c18715e86a998c","first_seen":"2025-03-25T21:21:04.858705Z","last_seen":"2026-05-03T18:40:44.908849Z","times_seen":15,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/bg-bottom.4f6cbda1.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/bg-bottom.4f6cbda1.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/_next/static/css/96eb2e973c5a966a.css\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-9c708\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQFO%2FyccWBb44f2N3zKt0smZ1E%2FTEhNGbLwqB6nnQlFdd1a9ReNQcWXxmVETF2AuuKg2D60YQWyDtYSzpmcay%2FlGIiLlRrgCRoK2xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c58629f5370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 732, 8-bit/color RGBA, non-interlaced","md5":"964f4ff3eb1661e3e07196f42fb6757f","sha1":"56d81c55ad02f2481151a48f72c8c5f1173e3e7b","sha256":"276f67e97e6197e040303fe00ed6fb1a8edf2f04ddb8770930ad7e891ccbb6f1","sha512":"fd7bb402308fdc808754554277382aa8418d39e6e70a9b35b7d21db691fd8b6a29cae3f8579e022101e2153246095542d3196fc425eaaff157535a88e17d7828","ssdeep":"12288:W1SxAXnElsBbil2urD736BIxjLUPTFH6VkbRJ9J72c9s+po+y5U/IJM:ZG0lFwurSWxjLU7d4kbRJd9s+po+hwJM","tlshash":"99d42328274f188f9917afc0c3feb6cb8e643e5ab5811ab1815e7445464ee44fb0f4e9","first_seen":"2025-03-25T21:21:04.84323Z","last_seen":"2026-05-03T18:40:44.917115Z","times_seen":21,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/team-lines.8a64e266.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/team-lines.8a64e266.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/_next/static/css/bcf2818d57aadaea.css\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-c6b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgUJPy%2FV4VcxFZIv5fPqwTezKuXm%2FSQWxRR2T6P9sR1gBEy3KIkUS0NyQrT1otIUO%2FaNgCrghh856ls8dm%2F1y%2BugcDSDfUnHP%2Fzt4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c58649fb370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1110 x 175, 8-bit/color RGBA, non-interlaced","md5":"2500f9879e1b636968e1826fefc8cc6c","sha1":"0419055cfe475b2379a6548fe2f11cdb123bbf6c","sha256":"9a97322023b5d925cfd29e421209ff49f66d4af9bc5ff738a103b3b13d0cf0f0","sha512":"ea548a8686f5e7203d93a4a2c483da0739cde60e733a6cab643066bc6cc9497cd032e460e7dfbe9b8257521cfdfb85d0bdfec3116857ef9d10c6ea6bc4f8c0e4","ssdeep":"","tlshash":"7861ac7ed651385421ab8d87b12949fd7e74021d5130844fef40e6eeadecc07e92dda0","first_seen":"2025-03-25T21:21:04.807916Z","last_seen":"2026-05-13T09:47:03.003547Z","times_seen":29,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/person-3.7b757fb7.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/person-3.7b757fb7.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-74298\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DG5wV6zQuLjD%2F%2Fp2iTj3ix9ujNlz9hxGA5klCsLZqstGGDxSVLzjQlpboebZ%2F%2FAOZc2fKyLNpuidJZSCZm%2F75VF7V%2FOzOptQo5BJCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c5869a0c370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 812 x 896, 8-bit/color RGBA, non-interlaced","md5":"b448ec850e2bd59b0ea34b85fee929c9","sha1":"399cabb74b6488ec63eb5bb7c32fef5fcd4a7e03","sha256":"52f4d3ba4acaa67373a35ec61062f1330a4d509f7e164ba1a79a24dac8610a89","sha512":"710cc67fd447eafc9d8b8bd5ddf25dae27a9e0ec3aa5fa4b2f8ef520051257737b3ca3ea239e306b379f2c2bc848989e58840bb71b4d0a381c0f0c783a986727","ssdeep":"12288:Kx+ckyt8sK1aAulzYgmZrucOwnG2RJV2/CIb3Ff:sPkyCspTL4rLOwTJV2/CQf","tlshash":"90a4239ec68b969b5efc0a1d0c8ced684c606896f9e90b163d8bf475dc17ef09448836","first_seen":"2025-03-25T21:21:04.834801Z","last_seen":"2026-05-03T18:40:44.913474Z","times_seen":21,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/person-4.ae019987.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/person-4.ae019987.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-6bc0b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFIokiZpXzI69CE6vcd5SOQRAKGNG6wxaxgRutj8TqlLcb2B5BfPcaFvkf3buaX7yVAfb7KNh6bUV30DjHWBeZvEp%2FhNDtFZRxSd9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c5869a0d370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 661 x 831, 8-bit/color RGBA, non-interlaced","md5":"c23112390e3bd0a0d868c92ba3e5b216","sha1":"a2b2823094c600b00f25c504b47503b0dd095ebb","sha256":"27b0b94f71a96cdfd1dc4b308ce1f693ed71e81b1148f096275aa357895be512","sha512":"2ba0d65c27f4b6e07daa13f805a0ec4811ec7cdc9a13f63e3ac4ea652991556682de8db50af73c88f39b42861e39b76ab62d41fc19efea3b94b952b5cadc8f24","ssdeep":"12288:5FK4Hk0TnL2fL5vJwwNxULk8VLj/Rm1yZ+CIjJ6:5YU0uwTZ8hbRm1yEC7","tlshash":"3b942343190d915670764c71a781d5d8bbeae7d28b1274caab230abf7e1673f5f8a200","first_seen":"2025-03-25T21:21:04.852919Z","last_seen":"2026-05-03T18:40:44.923265Z","times_seen":21,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/favicon.ico","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a; uv=mllgodv6-0s21e91o\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ShZ4Re7KY2eTp8ZPV8i%2BksEFL1sF5BXc4QWk5ZV%2BgZ8MOWM1CaVnXDUTYuOR3%2B0ZcmVa9jM8b%2BK7NdXeRF%2BV0ZRoJISaIg9RiIG1PA%3D%3D\"}]}\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6973eedf-771f\"\r\ncf-ray: 9cd7c588aa53370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30495,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"7b418b6bb7e77889587beff7aa7904b5","sha1":"ada023a50dde43292e058062a30df3a21868fb40","sha256":"a7c3f4690e65f8fd90327b36f0f11371e5c54af3fef19e7b257f7c6c887d6602","sha512":"5af6c0a98ae621d8e410b9f52e1a0e270b745a4ecb257bb0b82700bf072a8b8a89ba810b24c18e99b3b3d220c5ffba08a70683c725709436343506a3c21bc5ee","ssdeep":"768:8pRNoZtIm9MLHT+gc7BWYi6Mqt0aPE92ed5l96+:8gIm9MLHiFhZMrMuTdLJ","tlshash":"f8d2e1ca44a576abd768920d81b43fe73e080cddb05c48550bdee2e2d460fa2493ead7","first_seen":"2025-03-25T21:21:04.854128Z","last_seen":"2026-05-03T18:40:44.931224Z","times_seen":24,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/css/96eb2e973c5a966a.css","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/css/96eb2e973c5a966a.css HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfeFnHa3Fz20oiXE5SySOMRYHQrYNAv3vmh4jlWiB0aya0toaVgzKOaZUd%2FJk3uhuplqCSfdCZTpH5pAbwJngpp3ph9whxZf15OXYg%3D%3D\"}]}\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6973eedf-2e6\"\r\ncf-ray: 9cd7c584c9c8370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (742), with no line terminators","md5":"71997173b10d798d893db70e37fffcc7","sha1":"5b409ee9407a2a7a5e42ef33c617d51948276b9d","sha256":"9b8ccf3a87c43571b97596dadffac5781673657a27edfcde1a996b965ad1889c","sha512":"0d5ddf68dda35d3e38c355bf0b9a20918a2ac0d37a39739f3f7c1ede2416e1c23339abe20fa901834cef71086220cb5a204ebe98f53df114acc99114c81eaf6b","ssdeep":"","tlshash":"00012011ec95958f7a47891da0b4252dc604cc30e3532ebc7ab4e270d08908103f36a4","first_seen":"2025-03-25T21:21:04.857634Z","last_seen":"2026-05-03T18:40:44.918953Z","times_seen":15,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/css/cdac897fd7e939f6.css","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/css/cdac897fd7e939f6.css HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6973eedf-6ff4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryczgZ8pwSg5OTjjabeADgkUP4BvmRWC1y9qxM9og3tdB41oKli8hKhVMIrRHiQ8EQ131ZoFpUJPDfYHbj%2BrDK4Z1EbEjelD4sjR4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c584c9c9370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23940)","md5":"53b4fa834a497cb1ff772b4386ccfbf5","sha1":"2f7296a8145b484b81be5d9401e3222d2ea8d776","sha256":"ebdcedc216741d29bd7f8b1e63fd2ad91874cdaf35b0961f428f012659238c0c","sha512":"0320226d04888739bf27f77be56071814715d6fb322ca977f2be07263320d10daebed72f2735993a775cbaabc934e0d2c1b2b77d20f0fd7193e0a804c6a7e47a","ssdeep":"768:z6Q4nrf0frBDi91/+AoadpdZWdV52QUaX:z6Q4nrferBDffadpdZWdV52QvX","tlshash":"d6d2c09c4a500c1942a7037399ce9ed9893cc9d664322cee3265784f4b4d7ee63fe627","first_seen":"2025-03-25T21:21:04.789441Z","last_seen":"2026-05-03T18:40:44.919724Z","times_seen":15,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/bg-top.917f3ba6.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/bg-top.917f3ba6.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/_next/static/css/96eb2e973c5a966a.css\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-1314c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxUd1qAoDwqG8HB%2Fo0WMCYBYHLqlJcueC4GIRx4676r7PKRf4v4Z18cP%2BRwqukqhW2YOKldbhNBka1dRrutmKVJr6KUSkPpGsZzmSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c58629f3370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1250505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 909, 8-bit/color RGBA, non-interlaced","md5":"830293c499c0bb4eebb90b0d34a6afc5","sha1":"5d87e7dedcb49a26013a4af2d33dac073afcaae5","sha256":"66f47f6afe88fc442f5948fe803ab8e42ee0a6e606de2f70d9700f0c743ee9ed","sha512":"c96f4b3d723c9c03be7ae9838a7222be2474e702692a3a814cef338eca2eb1f558fb39ed74b4adb485dba422e2fa5da9a8338816a22198840a4227c51451da81","ssdeep":"24576:RXNGsLx0jNjxMqQUlGmg4bjcbqKNVi3nb3qnHVj5daWccRAqWaqNj:lNZx0jHGUWWYbqCmn+t5dUQAqSh","tlshash":"6f2533731d1e44c1b77ba79121f26e5cbe311748a85ab240f7641ca1923ef6ae47cb0b","first_seen":"2025-08-31T06:18:01.374182Z","last_seen":"2026-05-03T18:40:44.926448Z","times_seen":15,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/decor.e57ce5c2.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/decor.e57ce5c2.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/_next/static/css/96eb2e973c5a966a.css\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-11b7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GM8qYpLHiFyO%2FDqpq18DSyK2VKVUz0IF5kLxhc34Ep0LTTsfQc2FTXgYRt%2BdjCj1t9P2ia0qJmY7idGzxS1K7jTMnr%2FAfvGsM1Sazw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c58629f4370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1308 x 450, 8-bit/color RGBA, non-interlaced","md5":"57496eb7b35eeb90d0495a2abb7d3ef7","sha1":"c8f6658c371f995f2a00a4b7b363dc0184d39863","sha256":"de1184ed50ba9e610cfb03897bccb1f5121936e84a544d39fcaabe3a20c97d39","sha512":"13269abc7a2d895e6ccf205e81cb6c0cbb6f2f2c890575abc3bb68e12762dfc804fd673d98ec4b507f98a3df783f380c883be340e6fdde550ceab30841fd2026","ssdeep":"48:L/63nPYOTbzs5JJV2BgBJCuVz1BPMgo5Js0A2r1NXUblzg69I6J:LS3A0b8JJV2yHCmPO8lfJ","tlshash":"ab91c6aa63d60c82c25c797ca47afb6d1126bdaf4c0415c6c7f61ae117054cf57650d1","first_seen":"2025-03-25T21:21:04.827915Z","last_seen":"2026-05-03T18:40:44.927976Z","times_seen":21,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/person-5.0a0a1790.png","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/person-5.0a0a1790.png HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: \"6973eedf-718db\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2z5xscH5dq%2BTkcJrW%2BcWMGqEAyIIqOWtWOR3sxIcY4NjwCB6K%2FW0BLvn2V%2FIsJU%2BSULiiXQy97edPc%2FFVbFVTTSr74C6AtEKfVp0CA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c5869a0f370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 831, 8-bit/color RGBA, non-interlaced","md5":"dbf0080442ce642f122ab6feb3b171c8","sha1":"afed3bb87410962df957fbe8525048761daf31d2","sha256":"87f58677fa6226c601870d7a6ae0170b328e1897412c48bb7da22b651147669d","sha512":"277d001799094d5fe090218b534d84ca336402682ba17f27521b5e5d3e3c35d50eda3a47efe7405be1ecb736cc58d0af15bef977d05492eae6b1832242353b85","ssdeep":"12288:AoGhMDW4nW0kfNdtHma+CmYl7L9T3yFrL7PpSPI:AoG6HnW3HmMNLyxfBSPI","tlshash":"79a423e65b909dcf14673f1807c623e9955b14b60afa0e30cd736dc82243e5683b99be","first_seen":"2025-03-25T21:21:04.844231Z","last_seen":"2026-05-03T18:40:44.914175Z","times_seen":21,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:30:39.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:30:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.1.2-1ubuntu2.23\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgygPLjLmBsnDgM2%2BkJIKVaj6z29tmlsubzly9A1tblgW%2Bvv4xoXoDYjMxVBu0RTmRR0iNO8krWGPuL3EgXZxyfP1zgEwql2el6GjA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd7c58248710d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.1.2","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12018,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (513), with CRLF line terminators","md5":"fc8b58e54b79f155c993030c61dac3d1","sha1":"dbbfc3114f7f6958939f852790f28ad295a1e902","sha256":"5e8727c964125649ae6813a3a08f5b50cdd092a472b1350ff625aedfd40154aa","sha512":"bd7c00495b6eff7f40385864ac4b3c0b3c856caaa2ed802f150b2b7c5239a2879769233bd4d68505f85e19ade219de516e8079b55825c5b8ef0271207c431397","ssdeep":"192:5Dy9mIXF/Iz2/XFB1lCP9JwEOXwahpq0O9kUlWpWq7H52:9y9mIXF/IW7jKW+WpWCZ2","tlshash":"4b42b8a8d1c95806b233d2e667920b19fed08153db070a8873fd12ab9ff3d99952785c","first_seen":"2026-02-07T12:50:41.075642Z","last_seen":"2026-05-03T18:40:44.918061Z","times_seen":7,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":43,"dns":13,"connect":8,"send":0,"wait":128,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/4e81fe9cba68eadc-s.p.woff","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/4e81fe9cba68eadc-s.p.woff HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casetuns.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36556\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\npriority: u=3,i=?0\r\netag: \"6973eedf-8ecc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nq3N3bR8CZ5s5aj5jqOMJLfKjiljYFpve3qUoW%2FRELkbBMRTqlmd3eecTFjIjgaBNAUtYWG2KJRQjFNx4VgEe8vNBcKDpBA6XhbPTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c584c9c4370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36556,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36556, version 0.0","md5":"989947b092774c1d2811236856bbdcc3","sha1":"ea98b81bd2692f0be4331f20e2b304a6258b1ba1","sha256":"6a156519b783c083e2c25ed5c49c00dd956d6be26a347ef09a77221abbed33e9","sha512":"440fa0acd6f1c6e30cfb8aa4de56009579a17153a020c6714b56a9ba8104eee0807402db06817b0c3a338be7366cd5789f964dbcc338a2d6dd0056eb0d24ad2d","ssdeep":"768:8M3Mo0JBe4eVCT6M+D+AHn4WsoJavUMowRb6mr:8M3kJBZkhYAH4H5vUvw0mr","tlshash":"9cf201c2897cf25a6920c8f66cefb9e3a53535d7cc613b09105ba9ad0263017b88493a","first_seen":"2023-04-07T01:55:32Z","last_seen":"2026-06-07T00:04:00.343727Z","times_seen":696,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casetuns.com/_next/static/media/2b36e1e8f1bfdd5e-s.p.woff","fqdn":"casetuns.com","domain":"casetuns.com","tld":"com"},"ip":{"addr":"104.21.43.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casetuns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 10:27:10 GMT","end":"Tue, 21 Apr 2026 11:25:59 GMT"},"fingerprint":{"sha1":"EE:DF:39:75:E8:73:5A:9B:70:4C:C8:C6:F7:FC:16:F7:61:51:59:79","sha256":"1C:CE:1C:37:45:DC:37:96:56:DA:87:10:CB:F7:5B:6F:4C:60:B9:42:CF:29:4C:D7:AE:79:6C:04:0B:B0:EE:F5"}}},"request":{"raw":"GET /_next/static/media/2b36e1e8f1bfdd5e-s.p.woff HTTP/1.1\r\nHost: casetuns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casetuns.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bef46daca8e7693301b9b700777bf93a\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 22:30:40 GMT\r\ncontent-type: font/woff\r\ncontent-length: 37892\r\nlast-modified: Fri, 23 Jan 2026 21:57:51 GMT\r\npriority: u=3,i=?0\r\netag: \"6973eedf-9404\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tf8DgGWHiEJl8x3mDh2B0z6FpBVNyNIzJeBefwX4Uu4alIaKYO2BW9b4Vi24%2B2%2FicMxUpppc44%2BqXL1C3SXv7lD40%2F2t%2F43R6W8dgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7c584c9c7370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37892,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37892, version 0.0","md5":"82d7c60ca56318d5574a3e88f197c509","sha1":"63cf578c4ffc4f3cf9bbbce09b46176372f1ce5c","sha256":"a8c87e22fdc2213c42ee708df62ecef8847712ad02e37e544ce57cfdf7d4b6e9","sha512":"f2ec085c8c208ad2cb060eb79bc07037b2092ca49e6ea9e0ba3f4a1dcede3c40159a635e2a55243463a4fe800e5aa1461237bcb7d882dca9dbe1144424c14b90","ssdeep":"768:HvU3nWkEskh+2sJGFjzN44iE59C06/eLNpw6qsz/n4nA7oTnmSRry:HmfEsE+5JGdzN+Ei/ehpTqsjn+Tnm3","tlshash":"5d03020da8739706f86b2f3ca7ef0fd48898897c7d11d92bc0210b9144b58af6b479b5","first_seen":"2024-08-19T17:34:14.53642Z","last_seen":"2026-05-03T18:40:44.925634Z","times_seen":25,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"casetuns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"casetuns.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Wts2sab1iLvWHMWad_vRzsvNocCW6khUz_WXQyN6uIH-fbFd1XJcjFuEJ50W6xofhYuu05AHdiYxNn3-viXlM7C91o7FVpU-ja-I/360fx270f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casetuns.com/","date":"2026-02-13T22:30:40.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Dec 2025 22:18:58 GMT","end":"Thu, 26 Mar 2026 22:18:57 GMT"},"fingerprint":{"sha1":"BC:88:FA:43:31:7E:36:D1:40:4E:D0:B4:F5:AB:A4:2A:DF:83:38:39","sha256":"25:C7:4C:9C:7B:1E:2F:0A:06:23:E6:9F:0F:4F:94:DD:62:A3:05:3C:2D:98:91:20:1B:A0:ED:BA:B3:03:A7:EA"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Wts2sab1iLvWHMWad_vRzsvNocCW6khUz_WXQyN6uIH-fbFd1XJcjFuEJ50W6xofhYuu05AHdiYxNn3-viXlM7C91o7FVpU-ja-I/360fx270f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casetuns.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:09:24 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 55359\r\nCache-Control: public, max-age=133603\r\nExpires: Sun, 15 Feb 2026 11:37:23 GMT\r\nDate: Fri, 13 Feb 2026 22:30:40 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 270, 8-bit/color RGBA, non-interlaced","md5":"755c685d8048947585ab43380ae15ef3","sha1":"d69508cc2361a747cb100cdd1c46105a4bf780c3","sha256":"665a344a6130548912804bdf341ced96abd131c0125e5273f0acd23db26bf425","sha512":"a01172022770ef968e991e90006bb94dd95aede9fa9b02bce9afcb926b66b4259c31c5cea5c2a2880395c8029f7ac2bfab6cda8f885bbed5545aeaff9820e493","ssdeep":"1536:nYMNLclO9PC3zpLli7VZ0W/3TRPisvQi/B3tQU5w:8lO9PCDpE7VZlPisvrTW","tlshash":"3d43f18f0ea107e6c17f0e65b4580878fe960acded6c3eade7112dee63a67055416324","first_seen":"2026-01-21T12:55:04.528566Z","last_seen":"2026-05-03T18:40:44.916283Z","times_seen":9,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":66,"dns":59,"connect":1,"send":0,"wait":6,"receive":2,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}